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ABSTRACT 

The California High Speed Train Project (CHSTP) requires the depioyment of an Automatic Train 
Controi (ATC) system that provides; 

. Automatic Train Protection (ATP) functions of train detection, coiiision and overspeed 
prevention, broken raii detection, interiocking controi, hazard detection, train separation, 
and work zone protection 

. Automatic Train Operation (ATO) information and controi functions 

. Automatic Train Supervision (ATS) functions to provide centrai supervisors with status 
information and the abiiity to controi train operations 

. Positive Train Controi (PTC) as mandated by the Raii Safety Improvement Act of 2008. 


This Technicai Memorandum describes the functions within each group and identifies how those 
functionai groups wiii be met by the train controi design, specification, and impiementation 
phases. 

The prime requirement for the CHSTP ATC system that has been identified in common with aii 
systems is that the technoiogy must aiready exist as part of an operating system with proven 
experience woridwide on at ieast one high speed passenger raiiway. 

It is recognized that there are reguiatory requirements from authorities such as the FRA, FCC, 
and CPUC which must be met and in meeting those requirements it might mandate changes to 
the proven system(s) in order to achieve certification from such reguiatory bodies. 

The purposes of this Technicai Memorandum are to; 

. Define the concept of the ATC system 

• Describe the subsystems of the ATC system and the purpose of each. 

• Identify the portions of the ATC system that wiii interface with and therefore impact the 
infrastructure, inciuding the right of way, design. 

• Identify the portions of the ATC system that wiii interface with and therefore impact the 
roiiing stock design. 

• Identify other portions of the ATC system that interface with and therefore impact the 
faciiities and other subsystems of CHSTP. 

• Identify the particuiar aspects of candidate ATC system that may be impacted by 
reguiatory requirements from the FRA, FCC, CPUC, and other authorities and 
administrations. 
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1.0 INTRODUCTION 

This technical memo addresses the concepts of the Automatic Train Controi (ATC) system for the 
Caiifornia High-Speed Train Project (CHSTP), describes the various subsystems, and addresses 
design considerations for the specification of the ATC and interfacing systems for procurement. 
CHSTP ATC wiii use existing, proven high-speed train controi technoiogy such as that used in 
Europe and Asia, or as adapted from proven U.S. ATC equipment, if practicai. It is recognized 
that these proven high speed raii ATC systems do not meet aii FRA reguiations and that 
adaptation or equivaiency must be demonstrated in order to achieve certification. The CHSTP 
wiii foiiowthe Federai Raiiroad Administration’s Ruie of Particuiar Appiicabiiity process to achieve 
certification. 


1.1 Purpose of Technical Memorandum 

This Technicai Memorandum serves severai purposes; 

• Defines the concept of the ATC system 

• Describes the subsystems of the ATC system and the purpose of each. 

• Identifies the portions of the ATC system that wiii interface with and therefore impacts the 
infrastructure (inciuding the right of way) design. 

• Identifies the portions of the ATC system that interfaces with and therefore impacts the 
roiiing stock design 

• Identifies other portions of the ATC system that interfaces with and therefore impacts the 
faciiities and other subsystems of CHSTP. 

• Identifies the particuiar aspects of candidate ATC system that may be impacted by 
reguiatory requirements from the FRA, FCC, CPUC, and other authorities and 
administrations. 

1.2 Statement of Technical Issue 
1.2.1 ATC Functions 

The CHSTP requires the depioyment of an ATC system that supports the performance goais of 
the project inciuding maximum speeds, trip times, and headway and that meets federaiiy 
mandated practices and functions for a signaiing system inciuding Positive Train Controi (PTC). 
The ATC system must ensure the foiiowing key safety functions; safe train separation, prevention 
of overspeed deraiiments, faii safe train detection, broken raii detection, interiocking ruies 
enforcement, hazard response and work zone protection. The overaii ATC system must 
incorporate the functions of Automatic Train Protection (ATP), Automatic Train Operation (ATO), 
and Automatic Train Supervision (ATS). These three functionai areas of the ATC can be briefiy 
described as; 

• ATP - Automatic Train Protection - subsystem responsibie for the safety-criticai 
functions inciuding PTC. 

• ATO - Automatic Train Operation - subsystem responsibie for the automatic operation of 
throttie and brake commands to move trains between stations and other stopping 
iocations. 

• ATS - Automatic Train Supervision - subsystem responsibie for the centraiized 
supervision and controi of train movements inciuding the back office server functions 
associated with PTC. 
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The functional sets are described in more detaii in Section 2. 

ATC consists of equipment and software onboard the train, aiong the track, in wayside equipment 
rooms, and in centrai and regionai controi faciiities. In addition to the primary signaiing reiated 
functions, ATC inciudes equipment such as snow meiters and interfaces to other subsystems 
inciuding hazard detectors and piatform edge doors (if depioyed on CHSTP). 


1.2.2 TSIsandERTMS 

The CHSTP reguiatory design approach is to modei the requirements definition structure at the 
system ievei using the Technicai Specifications for Interoperabiiity (TSIs) as pubiished by the 
Commission of the European Communities. The TSI governing signai requirements is Reference 
C(2006) 5211 for the command and controi signaiing subsystem. The TSI identifies a number of 
system requirements that are required to assure interoperabiiity for trains from one European 
country to run on tracks in another. Foiiowing the TSI approach for CHSTP presents two 
significant constraints; one is that the requirements are specificaiiy aimed at the European Raii 
Traffic Management System (ERTMS); the other is that they encompass system requirements for 
interoperabiiity between the various member train controi systems and are not comprehensive in 
describing the fuii set of requirements needed to specify an ATC system. ERTMS is composed of 
two Euro-standard subsystems; the European Train Controi System (ETCS), and the European 
Integrated Radio Enhanced Network (EIRENE). ERTMS is specified in detaiied documents 
produced by the UNISIG consortium; a group of internationai train controi system suppiiers. The 
ERTMS and EIRENE specifications together ensure that trains so equipped can operate safeiy 
and efficientiy anywhere in ERTMS/EIRENE equipped territory. 

ERTMS (and TSI) specifications do not specify the requirements of subsystems that are typicaiiy 
non-interface and iegacy systems of the raiiroads from the EC member states. These 
subsystems inciude interiocking, train detection, and wayside equipment to support degraded 
mode operations in the event of a faiiure of a primary ATC subsystem. 


1.2.3 Other Candidate ATC Systems 

Other candidate ATC systems inciude; 

• The TVM430 coded track circuit based system (originaiiy deveioped by CSEE, now a 
division of Ansaido) and reiated products that use coded track circuits 

• Japanese coded track circuit technoiogy depioyed on the Shinkansen and Shinkansen 
derivative iines in Japan and other countries inciuding Taiwan. 


ERTMS and coded track circuit-based systems have significant differences; ERTMS detects train 
position using track circuits but conveys safety-criticai information to trains in the form of 
movement authorities by means of a data radio network. Coded track circuit-based systems 
detect train position using track circuits but aiso send data to trains through the track circuit 
(running raiis), simiiar to the way conventionai cab speed signais systems work. Newer digitai 
track circuits provide higher data rates than conventionai cab signaiing circuits, and can send 
messages to trains in reai time that convey much more information than the traditionai maximum 
speed iimit. 


1.2.4 ATC Specification Requirements 

To enabie quaiified vendors of these proven ATC systems (coded track circuit and radio network 
based) to propose, this memorandum recommends that the ATC system specifications focus on 
ATC functionaiity and performance, and aiiows either coded track circuit or radio based systems. 
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As described above, the CHSTP is using TSIs to heip define the project reguiatory framework. 
For ATC, the TSIs do not specify the functionai or performance requirements even at a system 
ievei. Therefore, this document defines ATC functionai and performance requirements to the 
ievei needed to prepare bid specifications. 

This Technicai Memorandum describes the functions within the ATC and its ATP, ATO, and ATS 
functionai sets, describes the iocations where the equipment wiii be instaiied and the interfaces 
the equipment wiii have with other subsystems, and identifies how these functionai subsystem 
requirements wiii be deveioped and met by the train controi design, specification, and 
impiementation phases. 

The prime requirement for the CHSTP ATC system is that the technoiogy must aiready exist as 
part of an operating system with proven experience woridwide on at ieast one high speed 
passenger raiiway. 

Any candidate technoiogy must aiso meet or be modified to meet the reguiatory requirements 
from governing authorities inciuding FRA, FCC, and CPUC. 


1.3 General Information 

Terms and Acronyms are contained in Section 6. 

1.4 Units of Measurement 

The Caiifornia High-Speed Train Project is based on U.S. Customary Units consistent with 
guideiines prepared by the Caiifornia Department of Transportation and defined by the Nationai 
Institute of Standards and Technoiogy (NIST). U.S. Customary Units are officiaiiy used in the 
United States, and are aiso known in the U.S. as “Engiish” or “Imperiai” units. In order to avoid 
confusion, aii formai references to units of measure shouid be made in terms of U.S. Customary 
Units. 
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2.0 DEFINITION OF TECHNICAL TOPIC 

The technical topic of this memorandum is the provision of a high ievei description of the CHSTP 
Automatic Train Controi system (ATC) requirements. These requirements inciude those identified 
in the reievant TSI for train controi, and aii others needed to define a fuiiy functionai ATC system 
for high speed passenger operation. 

The term ATC refers to the train controi system in main iine and terminai territory yards. This 
memorandum aiso addresses the requirements for signaiing trains in Yards. Yard signaling, 
aithough a signai system function and interfaced with the ATC system, is not normaiiy considered 
to be part of an ATC system. ATC is divided into three functionai sets; 


• Automatic Train Protection (ATP); 

The functionai set responsibie for the safety-criticai functions inciuding those of 
interiocking, train detection, signai aspects, broken raii detection, hazard detectors (if 
impiemented as part of the ATC system), and movement authorities (inciuding speed iimit 
and cab signai commands if appropriate) that are sent to the train and acted upon by the 
on-board train controi to enforce safe iimits. The ATP functionai set inciudes the 
enforcement of the safety-criticai functions. PTC functions are part of ATP. 


• Automatic Train Operation (ATO); 

The functionai set responsibie for the automatic operation of throttie and brake commands 
to move trains between stations and other stopping iocations (inciuding those required due 
to the proximity of other trains and signai status) within the constraints imposed by the 
ATP functionai set. Provides dweii timing at stations and the controi or prompting of the 
opening and ciosing of train doors. 

• Automatic Train Supervision (ATS); 

The functionai set within the automatic train controi system that is responsibie for the 
centraiized supervision and controi of train movements; the ATS monitors trains, adjusts 
the performance of individuai trains to maintain scheduies, and provides data to adjust 
service to minimize inconveniences otherwise caused by irreguiarities. ATS aiso provides 
automatic and manuai route setting at interiockings and the identification and tracking of 
trains, the dispiay of aiarms and events, and logging and storage of event data. 


These functionai sets of requirements are anaiyzed in Section 3 of this Technicai Memorandum. 
The ATC system consists of equipment and software onboard the train, aiong the track, in 
wayside equipment rooms, and in centrai and possibiy regionai controi faciiities. The subsystems 
consist of; 

• On-Board 

Equipment iocated on the passenger trainsets and maintenance vehicies inciuding 
processors, firmware, software and eiectronics, operator dispiays, operator switches, data 
radios and antennas, transponder/baiise antennas, code pick-up antennas, network 
components, GPS receiver and antennas, tachometers and other sensors, and aii 
connections between train controi eiements and interfaces between train controi and the 
train subsystems inciuding propuision and brakes. 
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• Wayside 

Equipment located in housings aiong the right of way inciuding station equipment rooms, 
train controi equipment houses, and signai equipment cases and cabinets. Wayside 
equipment aiso inciudes the track circuits and associated hardware, switch machines, 
wayside signais, and transponders that are mounted on or about the track itseif. The train 
controi equipment iocated aiong the main iine is part of the wayside equipment 
subsystem. 

• Data Communications 

The data communications network inciuding dedicated network eiements and components 
and data radio antennas and towers associated with the train controi system. There is a 
portion of the data communications subsystem on-board the trains in the form of radios, 
antennas, and data networks. The on-board data communications equipment can aiso be 
considered as part of the on-board subsystem. 

• Office 

Equipment deiivering ATS functions iocated in the Operations Controi Center (OCC), at 
Regionai Controi Centers (RCC), and other designated faciiities inciuding station controi 
rooms. Yard controi towers wiii contain an office eiement for supervision and controi of 
yard signai equipment but it is iikeiy to be a separate set of equipment from the primary 
office subsystem (ATS) aithough it wiii be interfaced to that subsystem. 

• Fieid Portabie 

Equipment for use by Empioyees in Charge (EIC) of maintenance and construction work 
in the fieid and used to manage track and other fieid systems access. It is used to 
communicate digitaiiy and wireiessiy with the office and on-board ATC subsystems to 
manage and controi train movements through an active work zone. 

• Yard 

Equipment distributed throughout the yards and maintenance faciiities for the operation of 
switches, signais, and enforcement devices to controi train movements within Yard 
territory. 
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3.0 ASSESSMENT / ANALYSIS 

3.1 General 

The CHSTP is developing an ATC functionai and performance procurement specification. If parts 
of the ATC system are procured in more than one contract, sufficient detaii must be inciuded to 
ensure that in addition to function and performance, the interfaces are adequateiy specified, the 
needs for maintenance and interchangeabiiity are met, and the overaii system meets its goais for 
safety, reiiabiiity, and avaiiabiiity. The CHSTP intends to minimize the number of suppiiers of 
equipment of simiiar function in order to simpiify maintenance and avoid carrying additionai sets 
of spare parts. 

This TM describes the required ATC system eiements, why those eiements are needed, and the 
engineering and operationai issues that must be addressed in the ATC design and procurement. 

The CHSTP ATC system must inciude the PTC functions that satisfy the Raii Safety Improvement 
Act (RSIA) of 2008 and the related regulation 49CFR236 Subpart I. For CHSTP, PTC will be an 
integrated set of functions within the ATC system where train collision and overspeed protection 
as well as the protection of roadway workers will be enforced. Although many PTC systems are 
being implemented as overlays on conventional wayside signal systems to meet the RSIA 
deadline of the end of 2015, CHSTP PTC will be an integral part of the ATC system. 

For high speed operation, train safety must be assured by an automatic system that enforces 
speeds at all times, including the slowing of a train for an obstruction of the line ahead. Such 
obstructions can include a train ahead, a reduction in the civil speed limit (permanent or 
temporary), or an unset or unlocked switch in an interlocking ahead of the train. 


3.1.1 ATP Functions 

The basic safety-critical functions of the ATP functional set are; 

• Enforce all speed limits on a train to prevent overspeeding through curves, switches, 
work zones, and other features that require speed supervision and enforcement to 
ensure safe operation. 

• Ensure trains are separated to avoid rear end and side swipe collisions. 

• Prevent derailments and collisions from movements through incorrectly set and/or 
unlocked switches and from conflicting train movements by setting and locking switched 
routes through an interlocking and only authorizing safe train movements through the 
interlocking 


The train control system will also provide safe enforcement of other functions including ATC 
responses to hazard event detectors and sensors (provided by other subsystems) including; 

• Earthquake 

• Excess wind speed 

• High water levels 

• Excessive rainfall 

• Underpass bridge strikes 

• Landslide and rock falls 

• Intrusion at trackside and in tunnels 

• Intrusion from overhead bridges and at tunnel portals 

• Intrusion at stations 

• Dragging equipment 

• Rail breaks 
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Although the majority of the listed hazard event sensors wiii be specified by other discipiines, 
many wiii be interfaced to at ieast one of the subsystems of the ATC, and the ATC wiii invoke the 
system response. In some cases, the ATS functionai set wiii iog the event and to dispiay an 
event and/or an aiarm to the operators for their further action; in other cases the ATP system wiii 
directiy cause the train to enforce a braking activation and possibiy stop trains in an emergency. 
Each sensor interface must be identified and the response of the ATC system to each interface 
agreed with Operations and other discipiines. 

The ATC wayside equipment wiii inciude doubie-raii track circuits for train and broken raii 
detection. Track circuits are an approved means of detecting broken raiis and this approach is 
acceptabie to the FRA. A break in the raii must cause a faise occupancy in a track circuit which 
in turn wiii resuit in a restrictive command being given to an approaching train. For track circuits 
to reiiabiy detect broken raiis and for the ATC system to protect trains, the ATC system must 
normaiiy aiiow oniy one train in a track circuit at any one time. 


3.1.2 ATS Functions 

The ATS functionai set wiii provide train management functions to assure the effective and 
efficient operation of a passenger train service. Such functions inciude automated routing and 
scheduiing of trains and a means for dispatcher intervention to deai with incidents and 
emergencies. 


3.1.3 ATC Equipment 

The ATC system wiii consist of eiements and subsystems that must be cioseiy integrated to 
provide an overaii soiution for CHSTP operations. The ATC system must be cioseiy integrated 
with other system eiements, such as roiiing stock, intrusion detectors, and hazard detectors, to 
ensure the necessary ievei of safe operation. 

The ATC subsystems wiii consist of the foiiowing equipment; 


• On-board - This subsystem consists of a combination of vitai and non-vitai equipment 
iocated on the passenger trainsets and maintenance vehicies. Vitai equipment is used to 
fuifiii the ATP functions, non vitai equipment is used to fuifiii aii non ATP functions such 
as ATO and dispiays. The equipment inciudes processors, firmware, software and 
eiectronics, operator dispiays, operator switches, data radios and antennas, 
transponder/baiise antennas, code pick-up antennas, network components, GPS receiver 
and antennas, tachometers and other sensors, and aii connections between train controi 
eiements and interfaces between train controi and the train subsystems inciuding 
propuision and brakes. Sensors and processors are used to determine position and 
speed, computer equipment, and operator controis and dispiays. Depending on the train 
controi technoiogy seiected, the on-board equipment may aiso inciude data radios and 
antennas with which to communicate with the wayside and centrai controi subsystems. 
The on-board subsystem may aiso inciude antennas and decoding equipment to detect 
digitai signais transmitted to the train through the raiis. The on-board package wiii 
receive data through the radio or the raiis that define the movement authorities within 
which the train can safeiy operate. The actuai speed of the train wiii be continuousiy 
compared to the authorized speed. If the train is to operate in ATO, the ATO functionai 
set wiii handie any changes in speed caiied for. If the train approaches an overspeed 
condition the ATP functionai set wiii generate a warning to the train operator. If 
appropriate action is not taken, the on-board system wiii intervene to ensure that the train 
movement stays within safe iimits. 

The on-board ATC wiii use sensors to determine the train’s position to a high ievei of 
resoiution both iateraiiy (which track the train is on) and iongitudinaiiy, as weii as 
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accurately measure speed. The enforcement of the Movement Authority limits enabies 
the on-board system to provide the required PTC protections. 

The onboard ATO functionai set wiii reguiate train performance when seiected. 
Commands received from the ATS functionai set may aiso provide for pacing trains at a 
iower speed than their maximum speed or increasing speeds from the pacing speed 
caiied for by the normai scheduie. Under no circumstances can these ATO functions 
aiiow the train to operate faster or further than the safety-criticai iimits determined by the 
PTC functions of the ATP functionai set. 

The on-board ATC subsystem wiii interface with the roiiing stock subsystems to support 
the ATP, ATO, and ATS functionai sets. 

In addition to interfaces required for the ATC system functions, additionai train interfaces 
wiii provide remote monitoring capabiiities of roiiing stock subsystems. Remote 
monitoring aiiows for eariy diagnosis of troubie. Monitoring can be done using the office 
subsystem as part of the ATS functionai set. Aiarms and event indications can be 
dispiayed at the Operations Controi center and the Regionai Controi Centers, or at ATS 
remote workstations at other iocations. 

On-board passenger information systems, inciuding audibie and visuai announcements 
of reai-time performance and other information to the passengers may be provided from 
the Office subsystem through the ATC data communications subsystem or by an 
independent data communications subsystem. 

The on-board ATP functionai set equipment wiii interface to wireiess or above-raii 
inductive antennas that receive Movement Authority commands from wayside ATP 
functionai set equipment. A data radio subsystem wiii provide data transmission between 
the train and wayside. 


• Wayside - consists of mainiy vitai equipment iocated in housings aiong the right of way 
inciuding station equipment rooms, train controi equipment houses, and signai equipment 
cases and cabinets. The equipment inciudes track circuits, switch machines, wayside 
signais, interiocking equipment, and transponders (or baiises), much of which is 
considered to be conventionai signai system equipment. This equipment inciudes ATP 
eiectronics that is either integrai to or interfaces with the track circuit and interiocking 
equipment and to other sensors inciuding intrusion, seismic, and other detectors that wiii 
aiiow the train controi system to react to an event and bring the train to a safe speed if 
necessary. The ATP processors obtain track circuit occupancy status, interiocking route 
status, and sensor device status in order to output messages to the trains that define the 
safe iimits (inciuding distance to go and target speeds) for train movement. Equipment 
wiii be housed in a distributed fashion aiong the raii iine to provide continuous coverage 
inciuding aiong aeriai structures, through tunneis, in yards, and in stations. 

Interiocking functions inciuding route setting, route iocking, approach iocking, and 
sectionai reiease wiii be performed by wayside microprocessor interiocking equipment. 

The wayside subsystem wiii be iinked by the data communication subsystem to aiiow 
supervision and remote controi from the Operations Controi Center (OCC) and the 
Regionai Controi centers (RCCs). 

Site requirements for ATC equipment at the wayside are described in Technicai 
Memorandum TM 3.3.2; Automatic Train Controi (ATC) Site Requirements. 


Data Communications Subsystem (DCS) - Communicates data, commands, 
indications and aiarms between ATC subsystems and iocations. This consists of 
connected networks of wireiess, fiber optic, and hardwired equipment. 
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The DCS will carry both vital (ATP) and non-vital (ATO, ATS and management) 
information. The DCS itseif does not have to be a vitai subsystem. Coding and other 
techniques in the other ATC subsystems ensure that the data received is of sufficient 
integrity and currency that it can be treated as accurate for vitai appiications. ATP 
equipment wiii reject any data for a vitai function that cannot be vaiidated. 

Many DCS eiements, inciuding eiectronics, fiber cabies, radio equipment, and antennas 
wiii be on CHSTP property. However, the diversity that may be needed to deiiver the 
specified communication iink avaiiabiiity may require the use of ieased communications 
iines provided by a third party as backup to the primary iinks. Some radio antennas may 
aiso be iocated off CHSTP property where propagation considerations indicate a benefit. 

The candidate ATC system ERTMS uses 900 MHz GSM-R radio to communicate 
movement authorities and safety-criticai data between train and wayside. These specific 
bands are not avaiiabie within the U.S. It is essentiai to identify one or more suitabie 
bands with sufficient bandwidth and reserve them through iicensing and/or other means 
for exciusive CHSTP use to ensure reiiabie system operation. 


• Office -The ATC Office subsystem supports the majority of the ATS functionai sets. It 
consists of a centraiized or a distributed computer controi system with dispatcher 
workstations that provides the overaii CHSTP train operation management functions 
inciuding remote routing and supervision functions. It includes announcements of events 
including critical alarms and a logging capacity for all events. It generates many system 
performance reports. Many ATS functions supported by the Office subsystem are 
automated, including setting of routes at interlockings, regulation of train movements in 
accordance with the schedule, movement planning, and the recovery of the service from 
minor interruptions and failures. 

At any time, dispatchers can take manual control of route setting and schedule regulation 
functions from their ATS workstations in accordance with the rail management plans and 
procedures. Recovery from major interruptions and failures will likely require manual 
intervention of the dispatchers. The general arrangement of control positions by function 
and responsibility, including responses during failures and incidents, will be described in 
the Concept of Operations document. 

The Office subsystem architecture can be centralized or distributed to provide reliable 
computing power and the required workstations that allow supervisors to dispatch the 
services, monitor subsystem performances, and intervene to manually supersede 
automated processes in the event of incident and emergency. The territory controlled by 
each workstation can be adjusted by an appropriate official such as the Chief Dispatcher 
to adjust to workload demands as they fluctuate. As workstations can be in centralized or 
distributed facilities, or at remote locations, the ATC system can support a flexible 
approach to the overall supervision of the CHSTP rail operations. 

The Office subsystem communicates with wayside locations, remote workstations, trains, 
other ATC elements, and sensors including intrusion, through the data communications 
subsystem. 

The Office subsystem will provide workstations primarily within the Operations Control 
Center (OCC) and the Regional Control Centers (RCCs). 


• Field Portable - Equipment for use by Employees in Charge (EIC) of wayside work; it 
will be used to manage track and other wayside systems access. EIC portables will 
communicate digitally and wirelessly with the ATS and with on-board ATC subsystems to 
control train movements through a work zone. Trains may only operate through 
established work zones with the agreement of the EIC who can use the field portable 
equipment to enforce reduced speeds and track blocks. Although generally maintenance 
work on the tracks will be done outside of revenue hours, EIC portables will protect all 
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worksites and zones on or about the track, from movements of ATC-equipped 
maintenance vehicies and passenger trains. 

• Yard - Equipment distributed throughout the yards and maintenance faciiities for the 
operation of switches, and to provide wayside iiiuminated signais, and enforcement 
devices to controi trains movements within Yard territory. Red signai aspects wiii be 
enforced such that trains cannot pass a signai dispiaying a stop indication and cannot 
enter an uniocked switch or stop foui of a train movement authorized on another track. 


Controi of the Yard signaiing systems wiii be from a panei or workstation iocated in a 
controi room (or tower) within the yard faciiity. 

Train movements between yards and the main iine wiii be routed through transition tracks 
where trains wiii transition between ATC and Yard signai system modes of operation. 


3.2 ATC Development Work 

Work during the CHSTP design deveiopment phase is identifying candidate ATC technoiogies, 
deveioping system requirements, and defining interfaces between ATC and other CHSTP 
systems. These wiii enabie procurement of an ATC system with the needed functions, safety, 
reiiabiiity and avaiiabiiity for CHSTP operation. 

Using ATC technoiogy deveioped under a foreign reguiatory framework requires extensive 
anaiysis of the FRA CFR requirements for signaiing systems, inciuding the new PTC reguiations 
issued as 49CFR Part 236 Subpart I. 

The adopted reguiatory basis for the CHSTP system design inciudes appiicabie portions of the 
European Commission Technicai Specifications (TSI). Aithough the TSI for Command and 
Controi is sianted towards the European Raii Traffic Management System (ERTMS, the CHSTP 
has not seiected ERTMS for CHSTP ATC. 

The CHSTP design criteria wiii inciude requirements that address any gaps between the TSI- 
based System Requirements and the FRA reguiations. 


3.2.1 ERTMS 

The European Raii Traffic Management System is a candidate technoiogy for the CHSTP ATC 
system. It is specified to three ieveis of functionaiity; 

• Levei 1 is a simpie fiii-in where signai aspects are conveyed to trains by intermittent ioops 

• Levei 2 uses radio to continuousiy convey track circuit occupancy and other data to 
trains. Leveis 1 and 2 use track circuits for train detection. 

• Levei 3 is the most technoiogicaiiy sophisticated system. It does not require track 
circuits; it primariiy uses on-board vitai equipment to determine train position. 


Levei 3 does not use track circuits; instead the on-board ATC equipment wiii determine train 
position with much higher resoiution than can be provided by track circuits. A Levei 3 ERTMS 
system wiii approach moving biock capabiiity. The term moving biock describes a system in 
which foiiowing trains are separated by the braking distance of the foiiowing train pius a safety 
buffer distance. This separation is typicaiiy much cioser than that supported by a track circuit (or 
fixed biock) signaiing system. 

To date severai ERTMS Leveis 1 and 2 systems have been impiemented and have actuai 
revenue experience. This is true for both conventionai speed raiiroads and for high speed iines 
approaching 200 MPH. ERTMS systems are aiso being deveioped and empioyed outside the 
EC. In December 2009, the Chinese high speed iine (Wuhan to Guangzhou High Speed 
Raiiway) opened, with a top speed of 245 mph. It is equipped with a Chinese Train Controi 
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System (CTCS) Level 3 train control system. However, the CTCS Level 3 ATC is simiiar to the 
ETCS Levei 2 system, using track circuits and radio; it is not simiiar to the ERTMS Levei 3 
system. 

No ERTMS Levei 3 systems have been depioyed yet, and the ERTMS Levei 3 equipment is not 
yet commerciaiiy avaiiabie and viabie. Even if and when ERTMS Levei 3 is proven in service, for 
CHSTP, a significant ERTM Levei 3 technicai and reguiatory issue concerns the use of track 
circuits to detect broken raiis. Currentiy aii high speed raii operations giobaiiy use track circuits 
both for basic train detection and for broken raii detection. Since ERTMS Levei 3 does not 
inciude track circuits, it cannot fuifiii the CHSTP broken raii detection requirement without some 
added provision. 

Because 49CFR236 requires a proven means of detecting possibie broken raiis, CHSTP wiii 
specify track circuits. This makes ERTMS Levei 2 a contender for CHSTP ATC for the foiiowing 
reasons; 

• ERTMS Levei 2 uses track circuits as a primary train iocation subsystem 

• It has been wideiy depioyed on high speed raii routes in Europe and other countries and 
is therefore a proven system 

• It has been deployed on systems with simiiar maximum speeds and headways as CHST 
design goais 

• There are muitipie suppiiers of hardware and software; these suppiiers have subsidiaries 
in the United States 


ERTMS inciudes both the train controi data radio and operations voice radio between the wayside 
and trains. The EIRENE (radio) component of ERTMS operates in the GSM band that has been 
dedicated throughout Europe for raiiway operations (GSM-R (Raiiways)); it carries both voice and 
train controi data circuits. There is no GSM-R band dedicated to raiiroad operation in the United 
States. If ERTMS is to be depioyed on CHSTP and appropriate radio frequency channeis cannot 
be secured from the FCC, ERTMS wiii require adaptation with respect to data and voice radio 
communications. 
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3.3 ATC Operations - Key Considerations 

The following table addresses key operational issues with respect to the ATC system definition. 

3.3.1 Operating Modes 

The foiiowing tabie operating modes and sub-modes are pianned for operation of CHSTP trains on main iine and in yards and depots; 


MODE OF 
OPERATION 

ATO OR 
MANUAL 
OPERATION 

MAX TRAIN 
SPEED 

ENFORCED BY 

NOTES 

ATC 

ATO 

Line Speed or as 
defined by Limit 
of Movement 
Authority 

ATP 

This is the normal operating mode on the main line which includes 
automatic operation of Rolling Stock propulsion and brakes by the ATO 
subsystem within ATC. 

Requires an action by the Train Operator to select ATO mode. ATP system 
must determine that other factors are correctly set before train can move in 
ATO mode (Movement Authority is being received by on-board ATP 
subsystem, doors are closed and locked, etc.) 

Rolling Stock subsystem requirement must include the Incorporation of the 
vigilance/alerter device to ensure The Train Operator is in the cab and alert. 
Rolling stock vigilance/alerter device is required in all modes of operation 
including ATC, RM, Bypass Yard, etc. 

ATC 

Manual 

Line Speed or as 
defined by Limit 
of Movement 
Authority 

ATC 

This is the operating mode on the main line where movements and speeds 
are fully supervised and enforced by the ATC system but the propulsion 
and brakes are commanded by the Train Operator 

Vigilance/alerter function to be provided by Rolling Stock; see note above. 

CHSTP ATC may include a Call-On mode to allow the train to pass a red 
signal under certain controlled conditions. If so, this will be a sub-mode of 
ATC/Manual. To enter it, the ATC system will send the train a Call-On 
command. ATP will enforce a speed limit of 20 MPH. 
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MODE OF 
OPERATION 

ATO OR 
MANUAL 
OPERATION 

MAX TRAIN 
SPEED 

ENFORCED BY 

NOTES 

Restricted 

Manual 

(RM) 

Manual 

FRA requirement 
of Restricted 
Speed. 

Restricted is 20 
MPH or lower, as 
required to stop 
within half of 
range of vision. 

ATC on-board 
subsystem 

A degraded Mode. 

In this mode the On-board ATP subsystem will limit train speed to 20 MPH 
maximum. Train Operator will work in accordance with procedure and 
observe the wayside signals for authority to move. 

Movement authorities, including speed commands are not received in this 
mode. 

In the event of receipt of a speed command or Movement Authority from 
the wayside while in RM mode, the on-board ATC will automatically switch 
to ATC Manual mode. 

RM mode addresses short term ATC failures such as movement through a 
failed switch (under procedure) or through a failed track circuit (which can 
include a broken rail) outside an interlocking. Movement through an 
interlocking with a failed track circuit can be done under Call-On mode (see 
above). 

Yard or Depot 

N/A 

Yard speed limit 

ATC 

ATC will enforce yard 
maximum speed limit 
not exceeding 20 mph 
per 49CFR236 Subpart 

I. 

The Train Operator will select the transition from ATC Manual mode to yard 
and vice versa when a train is stationary on a transition track when entering 
or departing a Yard. 

Yard signal enforcement is required however the safety criteria used in the 
design will not be as restrictive as for the main line ATC system. 

Trains approaching a shop track from the Yard will require a Train Operator 
acknowledgement before being allowed to enter a shop track. 

Yard mode can treat a shop entrance as an end of track and further 
movement forward can be in RM mode. This will be considered as part of 
an Operations Hazard and Risk analysis. 

If a wayside ATC failure affects Yard mode, RM mode is the most 
appropriate mode for further train movement, protected by procedure. If 
the on-board ATC fails, then the Train Operator must select ATC Bypass 
for further train movement, protected by procedure. 
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MODE OF 
OPERATION 

ATO OR 
MANUAL 
OPERATION 

MAX TRAIN 
SPEED 

ENFORCED BY 

NOTES 

Bypass 

N/A 

FRA limited 
speed is 59 MPH 
per 49CFR236 
subpart I. 

Rolling Stock propulsion 
and possibly braking 
subsystems. 

This is a mode NOT 
enforced by ATC. In 
this mode, ATC is in 
Bypass mode and is not 
connected to the rolling 
stock equipment. 

Safe operation of trains 
is maintained by home 
signal indications, by 
rules and procedures, 
by regular training and 
refresh. 

The maximum speed 
limit of 59 MPH will be 
enforced by the rolling 
stock propulsion 
subsystem. 

A degraded mode. 

This mode is used if the on-board ATC fails. 

Will require a separate Bypass switch that will be sealed normally in the 

ATC (not Bypassed) position. 

No secondary enforcement system is required other than a maximum 
speed supervised by the Rolling Stock propulsion subsystem. 
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3.3.2. Automatic Train Operation Mode 

3.3.2.1 Background 

In ATO mode, an on-board ATO subsystem that controls the operation of rolling stock propuision 
and brakes, to start a train at a station, acceierate it, reguiate its speed to beiow the speed iimit, 
move the train between scheduied station stops, and brake the train to a precision stop at the 
next station, aii subject to Movement Authority iimits set by the ATP subsystem. ATO mode is 
extensiveiy used in transit systems woridwide, but has had iimited use on main iine and high 
speed iines. ATO is now starting to be depioyed on passenger main iine tracks inciuding high 
speed operations outside the U.S. 

The Taiwan High Speed Train (HST) system uses an ATO mode caiied Programmed Station 
Stop Controi (PSSC). PSSC siows and accurateiy stops trains at stations; it does not start trains 
from stations or provide speed maintaining between stations. The Train Operator controis the 
train acceieration and speed for those phases of a trip. When the Train Operator activates PSSC 
on the approach to a station, the on-board ATO subsystem takes controi of the train propuision 
and brakes, and using track transponders to determine distance to go, automaticaiiy siows and 
stops the train in accordance with a programmed speed/distance profiie. 

3.3.2.2 ATO Mode Benefits 

Operation of trains in ATO mode has severai benefits; 

• Aiiows consistent optimized operation up to the maximum safe speed, resuiting in ciosest 
headways and minimum trip times. 

• Faciiitates accurate and timeiy station stopping with no running time ioss due to cautious 
operators and with minimum risk of over- and undershooting station piatforms. ATO 
mode provides benefits at aii speeds and wiii provide even greater benefit for station 
stopping in the higher speed sectors where judgment of distance is more difficuit. 

• Supports a positive “berthing” function whereby train doors are interiocked by the on¬ 
board ATC system and oniy reiease on the correct side and when the train is stopped 
properiy within the piatform iimits. This function together with accurate stopping 
capabiiity supports the potentiai impiementation of piatform edge doors at stations. 

• When used with scheduie reguiation functions integrated with an inteiiigent ATS 
subsystem, it supports on-time performance, improves recovery from service deiays, and 
improves efficiency of merges at raii junctions. 

• In conjunction with ATS, ATO supports energy management speed controi strategies 
which reduce energy usage by considering track grades and pianned arrivai times in 
setting a target speed beiow the ATP speed iimit. 

• Provides consistent operation of trainsets resuiting in iower wear and tear on roiiing stock 


ATO station stopping, aiready in service on the Taiwan HST, overcomes a major difficuity with 
operating high speed trains - the inconsistent abiiity of Train Operators to judge stopping 
distances. For a station stop from high speed, braking must start weii before the station is in 
sight; wayside markers (which might otherwise be used) have iittie or no vaiue when approached 
and passed at high speed. 

3.3.2.3 CHSTP Appiication of ATO Mode 

ATO mode operation wiii be incorporated into the ATC system design for aii phases of station-to- 
station running on the main iines and for exit and entry to yards inciuding; 

• Acceieration from station stops 

• Cruising at safe speeds determined automaticaiiy by the scheduie reguiation function of 
the ATS subsystem, or manuaiiy set by consoie dispatchers through the ATS 
workstations, or as determined by an Energy Management function. 
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• Stopping and restarting for ATC enforced stops defined by movement authorities 

• Exit from yard transition tracks within yards to the main iine 

• Entry to yard transition tracks from the main iine 

• Station stopping 

• Energy management 


ATO mode requirements wiii be incorporated in the interfaces with roiiing stock and other 
impacted subsystems. 

Further consideration must be given during the design phase to the foiiowing; 

• An important human factors issue is to keep the Train Operator engaged during extended 
runs in ATO mode. Considerations inciude the Train Operator’s interactions with a 
vigiiance device, the train and the on-board ATC system; and procedures that require 
manuai driving at intervais to make sure the Train Operator can correctiy operate the 
train when needed. This is a speciai concern to the FRA, as noted in the preambie to 
49CFR236 Subpart I. 

• Are sub-modes required such as fuii ATO mode and Programmed Station Stop Oniy 
mode? 

• Prerequisites to enter ATO mode and start the train, inciuding door interiocks and Train 
Operator cab consoie controis that interface to the on-board ATC equipment. Can ATO 
mode be entered or canceied on the fiy? 

• What are ATO mode requirements for safe and reiiabie operations during reduced 
adhesion conditions because of autumn ieaves on the iine and iight or heavy rain? 

• Is ATO required oniy on the main iines or is it a iow speed ATO mode required in the 
yards and/or the train wash tracks? 

• Operationai restrictions and procedures may govern ATO mode use; for exampie; 

When maintenance personnei are working on or about the track during traffic 
If there are special restrictions on the Peninsula Corridor. 

Detailed procedures will be written during the construction and test period. The decision to apply 
ATO and its sub-modes is subject to further discussion and will be a decision for the Operator. 


3.3.3 Bi-Directional Signaling 

Planned CHSTP passenger train operations will use one track exclusively in a single direction. 
Nonetheless, the ATC design will provide bidirectional running capability. With microprocessor 
interlocking and signal equipment, the cost of bidirectional signaling is marginal, resulting only 
from possible additional wayside signals and marker boards (see later section on wayside 
signals). With bi-directional signaling, if a wayside failure blocks a section of track, trains from the 
failed track will be safely and automatically routed onto the opposing track to bypass the failed 
track section. Traffic locking will allow safe following moves and prevent routes being cleared into 
tracks in opposing directions until the section between interlockings is clear. Trains operating in 
both directions on a mainline track equipped for bidirectional operations will operate with all ATC 
modes and functions available, including PTC and possibly including ATO for station stopping. 


3.3.4 Interlockings 

Interlocking functions are part of the ATP functional set. Interlocking functions will be provided by 
microprocessor interlocking equipment. Use of conventional signal relays will be minimized. 
Interlocking requirements will include route clearing, approach locking, detector locking, route 
locking, traffic locking, indication locking, time release, sectional release, and other functions. 
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Approach locking will be provided as the intermediate interiockings between stations wiii normaiiy 
be fieeted. Interiocking equipment wiii be interfaced with other ATP equipment to send 
movement authorities to trains that wiii ensure safe movement through interiockings. 

Wayside signais wiii oniy be iocated at interiockings. The wayside signais wiii oniy indicate the 
status of routes at their entrances. These wayside signais wiii not be the primary indication of 
route status; the primary indication wiii be the Train Operator’s dispiay in the cab. 


3.3.5 Track Circuits 

CHSTP wiii use a track circuit based ATP subsystem. 

In aii HST operations now in service, the ATC systems use track circuits for primary train iocation 
detection. 

Japanese Shinkansen and European TVM 430 ATC systems use track circuits for primary train 
iocation detection and aiso for the transmission of movement authorities to trains; the ERTMS 
ATC systems uses radio for movement authorities). 

Track circuits fuifiii the FRA requirements for detection of broken raiis. In the event of a broken 
rail, the ATP subsystem will assume a train is present and prevent a following train from entering 
the apparently occupied block. Further movement will be under procedure, allowing the Train 
Operator to observe the track ahead to determine if a broken rail does exist. 

The ERTMS Level 3 specification allows for a system that does not use track circuits; however, 
there is no ERTMS Level 3 system currently in service or construction. As noted above, ERTMS 
Level 3 uses the on-board derived location information and transmits this to the wayside ATP 
equipment for use by other trains to determine movement authorities (in addition to other factors) 
based on the reported position of trains. Train integrity is also required with Level 3 to assure that 
no portion of the train is left behind when the front of the train advances. 

ERTMS Level 3 development has stalled due to the complexity of the safety case combined with 
industry support of Level 2 deployments. Even in Level 3 ERTMS systems, some track circuits 
may be needed for interlocking functions, particularly in the event of ATC failures. 


3.3.6 Wayside Signals and Support to Fallback Operations 

ATC system failures can be divided essentially into two key event impacts; 

• A single train can be affected for a significant distance and time by the failure of the on¬ 
board ATC equipment 

• Several trains can be affected over a limited distance and time by a failure of wayside 
ATC equipment. 


A failure with similar impact on train operations is a broken rail, which will be detected by a track 
circuit. Track circuit failures will be treated by the ATC system as a broken rail event until proven 
otherwise. 

Normal ATC operation will not depend on use of wayside signals. The ATP subsystem design 
will provide some visual signals and signs at the wayside for fallback operations. Such signals 
are not of practical use when operating at high speeds (e.g., greater than 150 MPH). However, 
they will be usable in degraded operating modes when the on-board ATC system that generates 
cab displays of movement authorities is not available. 

The CHSTP ATC design presently plans wayside signals at the following locations; 

• At the entrance to interlocking routes (home signals) 

• In Yards 
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The prime use for mainline signais is to support safe train operation when the primary on-board or 
wayside ATC subsystems is not avaiiabie and when movement authorities cannot be received 
and enforced by the on-board ATC subsystem. 

Home signais wiii be provided on main iines oniy at the entrance to interiocking routes. 
Intermediate signais wiii not be provided. At high speeds, signais wiii not be visibie in a usefui 
way to the Train Operator, so the Train Operator must foiiow the cab signai indications or operate 
the train in ATO mode. During faiiures of the primary on-board or wayside ATC system, the 
maximum train speed wiii be iimited to 59 mph, the iimit in 49236CFR subpart I, maximum speed 
when operating with faiied PTC system. In addition, under present ruies a train with an ATC 
faiiure that occurs whiie the train is between interiockings must be operated at Restricted Speed 
untii it passes a wayside signai that indicates that there is no broken raii in the signai biock 
ahead. 

As noted above, ATP subsystem design criteria wiii require main iine home signais at the 
entrance to interiockings and signais to controi mainiine access from refuge tracks. A headway 
requirement to be supported by wayside signais wiii not be specified. 

The ATP subsystem design criteria wiii specify the type of signai and supporting structure. Dwarf 
signais minimize instaiiation cost and reduce iife cycie maintenance cost due to easier access for 
inspection and repair. The finai decision on signai type wiii depend upon the agreed maximum 
speed when operating in degraded mode. 49CFR23 Subpart I specifies a speed of 59 mph or 
iess for passenger trains operating in degraded mode without PTC functions, aithough the 
CHSTP may petition for a higher speed under the Ruie of Particuiar Appiicabiiity that wiii be 
required from the FRA to begin revenue service. 

A risk analysis wiii evaiuate factors reiated to train movement in the event of reievant ATC system 
failures. The analysis will consider maximum speeds allowable, signal sighting distances and the 
need to enforce the signals or not. If wayside signals will not be enforced, the sighting distance 
for each signal will be critical. In that case, high signals may be required, especially on grades 
and curves. Approach signals to interlockings may also be required. 

Extensive backup signal systems are undesirable in a number of ways; 

• With high availability of the prime ATC, the backup system will get only occasional use; 
Operations personnel will need refresher training to stay current. This will impact their 
availability for normal operations. 

• Added maintenance and regular test will be required for backup wayside and on-board (if 
provided) equipment. 

• Added cost and technical complexity of the overall ATC system; benefits are yet to be 
fully evaluated but current assumptions are that they will be very limited. 

• Backup signaling must be tied into the prime ATC system; failures of the backup can 
impact normal ATC availability and reliability. In any event, more equipment means lower 
overall reliability and an increased level of maintenance activity. 


The present design is that speed enforcement in degraded mode will be provided by a speed 
governor function in the propulsion subsystem. This governor will be activated by the ATC cutout 
switch in the operating cab. If the train speed exceeds the defined maximum (e.g., 59 MPH) then 
the propulsion subsystem will cut power to the motors and an audible and visual alarm will sound 
in the cab. 

The ATC system procurement specification will specify high availability normal operating modes 
so that CHSTP can provide dependable, on-time service. Considering the excellent availability, 
of HST service worldwide, CHSTP should rarely experience degraded mode operations. 
Information from Shinkansen systems experience is that the fallback systems are used sparingly 
and operating staff have little experience of their use. 




CALIFORNIA 


Page 19 





California High-Speed Train Project 


Automatic Train Control; Concept of System, RO 


If the fallback system is complex and equipment-intense, this wiii reduce overaii reiiabiiity due to 
the increase in hardware. This couid aiso reduce avaiiabiiity as faiiback system equipment 
faiiures can impact the avaiiabiiity of the prime ATC system under certain circumstances. 


3.3.7 Switch Machines 

Powered switch machines wiii be provided on aii switches, and on moveable point frogs on the 
Main Line and in yards (see iater in this section). The design team wiii determine the number of 
switch machines for each type of switch (which can be up to 8 machines per switch end for the 
highest speed turnouts) for the purposes of preiiminary engineering and cost estimating. The 
actuai number of machines needed to meet the functionaiity and RAMS performance 
requirements for the project wiii be detaiied, to ensure consistency between iine segments and to 
ensure a uniform maintenance approach on aii parts of the CHSTP system. 

Yard switch machines wiii be of a different type from mainiine; see the section on Yard Signaiing 
iater in this document. 

Some but not aii switches wiii require heating devices (snow meiters) that wiii keep switches 
operating during periods of snow and/or ice. These wiii be required for the interiockings at higher 
elevations where snow and ice can occur. Power for these devices will be taken from the OCS 
with a transformer and control equipment mounted on the OCS poles and in wayside equipment 
cases. 


3.3.8 Impedance Bonds 

Impedance bonds will be required at traction power facilities; at track circuit boundaries and 
possibly other locations including insulated joint locations at interlockings and at intermediate 
locations where ground connections must be made to the Overhead Contact System (OCS) static 
wire. Grounding may also be required at impedance bonds at track circuit boundaries. 
Engineering must be done to determine where these ground connections can be made to ensure 
correct track circuit operation under normal conditions; to ensure that touch potential criteria are 
met; and to ensure that the track circuits will correctly detect a broken rail. The Final Designer 
will coordinate with the traction power engineers in developing the track circuit and impedance 
bond locations. 


3.3.9 Wayside ATC Equipment Housings 

ATC equipment will require wayside housings whose size and type will depend on the location. 
The larger “house” enclosures (that maintainers can enter) are needed at interlockings; smaller 
wayside cases (where maintainers can access the equipment inside but cannot enter the case) 
will be adequate near track circuit boundaries. Other locations which may also require wayside 
housings including interface locations with event sensors including roadway underpass impact 
sensors, seismic detectors, wind speed measurement equipment, etc. 

ATC housings must accommodate ATC communications equipment. Such equipment includes 
fiber drop and network equipment as well as data radios. 

Site requirements for ATC elements are covered in Technical Memorandum 3.3.2; Train Control 
Site Requirements. 


3.3.10 Wayside ATC Power Supplies 

Alternating current power supply for ATC wayside equipment will be straightforward at stations 
and interlockings, where utility feeds are probably available. However, track circuit equipment at 
approximately one mile intervals requires ac power, and in remote, desert, and mountainous 
regions, a utility supply line could be difficult or expensive. 
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Alternatives to utility feeds are being considered, inciuding dedicated signai power feeds from 
adjacent ATC sites that have utiiity power feeds, drops from the OCS, soiar paneis, and wind 
turbines. In each case, the sources wiii be suppiemented with iocai batteries. 

Power suppiies for wayside ATC equipment is addressed in Technicai Memorandum 3.3.3; Train 
Controi Wayside Location Power Suppiy Options. 


3.3.11 Remote Control and Supervision 

The CHSTP remote controi and supervision strategy wiii impact the ATS functionai set and Office 
subsystem specification. The present design inciudes ATS functions, performance requirements, 
and hardware as part of the ATC system. 

Many ATS functions, inciuding automatic dispatching of trains and routing through interiockings 
and terminais, wiii be accompiished automaticaiiy with manuai intervention oniy required in the 
event of system faiiure or unpianned occurrences. 

The Office subsystem design assumes; 

• The ATS prime location wiii be in the main Operations Controi Center (OCC) 

• Remote workstations wiii be iocated in at ieast two other iocations (Regionai Center(s)) 
that wiii aiiow dispatching in certain regions, inciuding the common and shared corridors 
to be done reiativeiy iocaiiy. 

• The Regionai Controi Centers (RCCs) wiii be capabie of taking over dispatching of any 
and aii of the CHSTP system in the event of major incidents and faiiures. 


vaiiabiiity considerations may require that Office subsystem core equipment inciuding 
communications and database servers be iocated in the OCC, Regionai Centers, and possibiy 
other sites; with options for coid, warm, and hot standby of the backup systems. The purpose is 
to ensure that even if a major incident that knocks out the OCC (earthquake, sabotage/terrorist 
action, major fire, etc.), centraiized Supervision and Dispatching can continue with iittie or no 
interruption to train operations. 

Current pianning has identified that dispatching of the peninsuia corridor wiii require a regionai 
center to handie CHSTP and Caitrain services between San Jose and San Francisco. This 
Regionai center wouid be staffed 24/7 and couid be considered a iocation that couid assume 
supervision and controi of the fuii CHSTP network during a major incident. 

In emergencies, the controi of interiockings can be taken from a Regionai Center or a station 
controi room. 

A further ievei of degraded operation of an interiocking can use the iocai controi panei connected 
to the nearby ATC house, in the station controi room or the adjacent station. Aithough ATC iocai 
controi faciiities wiii be specified in the stations, the reiiabiiity/avaiiabiiity of the communications 
subsystem makes the ioss of controi from the ATS highiy uniikeiy. 

Consideration wiii aiso be given to a form of fieid-faiiback mode for the remote interiockings in 
which they wiii revert to normai routes being caiied and fieeted in the event of a ioss of 
communications with the ATS. This fieeted faiiback mode can be overridden from a iocai controi 
panei if it is necessary to operate the intermediate interiocking with ATS communications down. 
The iocai controi panei in the interiocking controi house wiii aiiow iocai controi in emergencies 
and for maintenance testing needs. 

For controi of Yard movements, each yard wiii have a iocai tower with iocai controi paneis or 
workstations where a Yard Dispatcher can route trains within the Yard and shops. Eiectronic 
handover of trains between the main iines and the Yard tracks wiii be accompiished via an 
interface between the mainiine ATS system and the Yard ATS workstations. See the next section 
on Yard signaiing. 
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3.3.12 Yard Signaling 

The Yards will require a signai system to operate switches and controi movements of trains in the 
yard itseif and for transitions between the Yard and the mainiine. 

The present design assumes there wiii be powered switch machines and iow ievei signais at the 
Yard wayside. Switch machines wiii be of a common yard type and not main iine machines. 
Yard machines are cheaper and can provide a traiiabie feature which iowers the risk of damage 
to equipment and of deraiiment if a train shouid traii a switch set in the wrong position for the 
move. 

Enforcement of signais and protection of trains and workers in the Yards wiii be provided by a 
subsystem yet to be determined. There may be some use of power-operated deraiis for this 
function. There wiii need to be functionai interiocking between signais, deraiis, and switches, 
aithough the ievei of safety in a Yard system is typicaiiy iess than specified for the mainiine. 
Trains wiii operate in some form of Yard mode (see the Operating Modes tabie above). 

Controi of Yard signais, deraiis, and switches in Yards wiii be from iocai Yard towers and not from 
the Centrai or Regionai Controi Centers. The operation of the controi paneis or workstations in 
the Yard towers wiii be undertaken by a depot Controiier or yardmaster. 

Maximum speed enforcement in the Yards wiii be by the on-board subsystem. In order to be 
exempt from instaiiing PTC in the Yards, the speed iimit within the Yard cannot exceed 20 mph 
per 49CFR236.1019(b)(1). 

Access and exit from shop tracks into the Yard proper wiii aiso be protected by means of power- 
operated deraiis. 

Train movements between Yard and mainiine wiii use bi-directionai transition tracks. On-board 
ATC equipment wiii transition from Yard mode to ATC mode of operation and vice versa 
automaticaiiy. Trains departing the Yard to the mainiine must pass an automatic on-board ATC 
subsystem check before the wayside ATC equipment wiii route the train or send it a Movement 
Authority or vaiid speed and destination code. The transition tracks must be treated by 
Operations and Maintenance personnei as mainiine track, since trains wiii operate in ATC modes, 
inciuding ATO mode. ATO mode wiii be possibie ieaving the transition track for the mainiine and 
when entering the transition track from the mainiine. ATO mode wiii not be avaiiabie for 
movements between the transition track and the Yard in either direction. 


3.3.13 Responses to Hazard Detection Devices 

CHSTP wiii use an array of hazard detectors. The hazard detector types may inciude; 

• Earthquake 

• Excessive wind speed 

• High water ieveis 

• Excessive rainfaii 

• Road and raii underpass bridge strike 

• Landsiide and rock faii 

• Intrusion at trackside and in tunneis 

• Intrusion from overhead bridges and at tunnei portais 

• Intrusion at stations 
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Each hazard detection type will be evaluated for the level of risk each hazard can pose to CHSTP 
operation; the interface to the ATC system; and the required ATC system response. ATC 
system responses can inciude; 

• Automaticaiiy change from ATO mode to Manuai-ATP mode. (Note that if the ATO 
function uses a “hands off” approach, this wiii appiy the service brakes untii the Engineer 
takes the controiier). 

• Stop the train immediateiy with a service brake 

• Stop the train immediateiy with an emergency brake 

• Biock an affected section of track. The on-board ATC equipment for each nearby train 
determines the ievei of brake needed to avoid entering the biocked track or to stop the 
train if it is aiready entering or in the affected track section. 


For track intrusions at stations, the choice is between automatic sensors of intruding passengers 
vs. customer/staff operated aiarms. 

If a hazard detector is connected directiy to the ATC system and a train response is forced, the 
hazard detector comes under FRA reguiation. If the detector is interfaced to the ATS to generate 
and aiarm at OCC, it is not. 

Consideration needs to be given to the response types required for different ieveis of intrusion. 

The EMT wiii further consider a need for Dragging Equipment Detectors (DED). If not necessary 
on the CHSTP tracks themselves, certain DEDs may be required on approach tracks used by 
freight or other passenger trains (e.g. Caltrain, Amtrak, and Metrolink) which may occasionally 
run on CHSTP tracks. The reason to place DEDs at approaches is to protect the CHSTP tracks 
and any track mounted equipment from damage by occasional users. High load detectors to 
protect the overhead contact system from freight trains may also be needed. 

Where there are physical track connections to other railroad operator’s tracks, the ATC system 
will require a function that prevents unauthorized trains, including freight, from being routed onto 
CHSTP tracks even on shared corridors. 


3.3.14 Regulatory Requirements 

To receive the FRA Rule of Particular Applicability permitting CHSTP operation, the CHSTP must 
demonstrate that the ATC system satisfies the respective CFR signaling requirements, including 
design, testing, and on-going maintenance. 

49CFR236 Subpart I, published in January 2010, defines the requirements of PTC and the 
processes by which FRA certification of the PTC elements of the ATC system can be achieved. 
For existing railroads, the regulations impose a deadline of April 16, 2010 for submittal of the PTC 
Implementation Plan and either a PTC Development Plan or a Notice of Product Intent. A non- 
operational railroad that is yet to be designed and built, such as CHSTP, must be certified before 
beginning revenue service. To be certified, CHSTP must submit and receive FRA approval for a 
PTC Development Plan, a PTC Implementation Plan, and a PTC Safety Plan. The CHSTP 
System Requirements which the CHSTP is now submitting to the FRA for comment will clearly 
show that the requirements of PTC and the processes laid down by 49 CFR236 Subpart I will be 
met by the CHSTP ATC system. Nonetheless, the rule-mandated documents must be submitted 
and approved before the start of revenue service. 

The CHSTP will establish a schedule of 49CFR236 Subpart I submittals with the FRA that will 
provide adequate time for reviews of all plans (including implementation, development, safety, 
test, and training), test results, operating and maintenance rules and procedures, and final 
application for certification, such that testing, trial running, and in-service dates can be met. 

The CHSTP will also address and comply with relevant CPUC requirements. 
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The CHSTP will also address and comply with Federai Communications Commission (FCC) 
iicensing requirements for transmitters that inciude voice and data radios and transponder 
antennas, inciuding registration of antenna towers where necessary with the Federai Aviation 
Administration (FAA) where CHSTP runs dose to airports. 


3.4 Further ATC Issues to Address 

The matrix on the foiiowing pages describes the key issues to be addressed in the deveiopment 
of the ATC system design criteria and specifications. The documents produced during the design 
deveiopment phase wiii identify issues, suggest aiternatives, and recommend the approach. 
Some of the issues are technicai, and some are required by reguiation. However, many are 
operationai issues and the detaiied definition of the ATC system wiii depend on the finaiization of 
the CHSTP Operating Pian. 


3.4.1 General 

• The ATC system specification must provide functionai requirements and performance 
threshoids. It must be fiexibie and not mandate particuiar systems, devices and 
methods. 

• ATC system interfaces with other systems as weii as with the infrastructure and services 
must be cieariy defined, especiaiiy those across contractuai boundaries. 

• The ATC system specification must preciude experimentai devices, prototypes, and 
technoiogy or equipment not mature, accurate, or reiiabie for the HST environment. 


The ATC system specification must preciude a contractor from proposing a system which 
incorporates immature eiements. 


3.4.2 ATC Integration 

• Ciose coordination with Roiiing Stock, Communications, and Operations is required 
during the deveiopment of the ATC system criteria and specifications to ensure an 
integrated system 

• Certain ATC system eiements wiii reside in specific pieces of CHSTP equipment, such as 
on-board trains or on the wayside. Some ATC functions wiii be provided by distributed 
ATC equipment and distributed equipment of other systems. 

• The ATC design team must perform integration work with the roiiing stock team to ensure 
that sufficient ATC equipment space and power are provided, and that detaiis for key 
components are accommodated. For exampie, particuiar types of tachometer (e.g., axie 
end) shouid not be preciuded by the roiiing stock body and truck design and maintenance 
requirements 

The iocation of the equipment in which certain ATC functions reside depends to some extent on 
the architecture of each ATC Suppiier. To the extent possibie, the ATC system specification wiii 
aiiow fiexibiiity to the ATC suppiier to propose the most cost-effective soiution that provides the 
required overaii ATC system functionaiity, performance, safety, avaiiabiiity, and reiiabiiity. 
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3.4.3 Determination of Position and Speed 

• The wayside ATP subsystem will use track circuit occupancy to determine train position. 
The on-board ATP subsystem must have higher resoiution of speed and position, since it 
uses these to accurateiy controi and supervise train movement. The higher resoiution is 
necessary so the train can travei through a biock as fast as safeiy possibie, can be 
operated in accordance with civii speed restrictions that may not be iimited to track circuit 
boundaries, and so the train can stop before it moves past its Movement Authority iimit. 

• Safe, accurate, and reiiabie determination of position and speed is one of the most criticai 
functions of an ATC system. Speed and position determination are typicaiiy done using a 
combination of devices and techniques, inciuding tachometers, inertiai sensors, GPS, 
and transponders or baiises (mounted between the raiis on the track). 

• Wayside track circuits indicate the position of a particuiar train on the track. The position 
information is used to fuifiii the interiocking functions and to protect the train from other 
trains. 

• Movement Authority iimits are estabiished as part of a Movement Authority for a specific 
train. These iimits define the target point, the iocation on the track beyond which the train 
cannot safeiy proceed, and the maximum speeds aiong the track that the train can go 
between its current position and its target point. 

• Each train's on-board ATP equipment set must receive its Movement Authority from the 
wayside ATP equipment. The ATP subsystem bases the Movement Authority on factors 
inciuding the status of routes through interiockings, the position of switches, occupancy of 
track circuits, iocation of other trains, and other eiements of the wayside signai system 
and reiate them to the on-board database. 

• On-board ATC equipment databases must aiso aiiow for updates from the ATS OCC 
equipment, for the temporary modification of database eiements inciuding speed 
restrictions. 

• The train ATP equipment must determine its position in reiation to the database and 
compare its actuai speed with the aiiowed speed at its current track position. 

• The Train Operator’s dispiay must provide sufficient information to aiiow the Train 
Operator to controi the throttie and brake so the train speed is ciose to the speed iimit, 
without unnecessary automatic ATP equipment intervention for impending or even actuai 
overspeed. 


On-board ATP speed and position sensors must be proven products and must be appiied, 
combined, and processed so the on-board ATP equipment’s estimate of speed and position is 
adequateiy accurate to ensure train safety. This may require diverse means of obtaining and 
processing speed and position data. 

Aithough roiiing stock propuision or brake subsystem tachometers may be used by the ATC 
system for non-vitai functions, the primary safety-criticai function of determination of train position 
and speed wiii use sensors provided and instaiied by the ATC system suppiier. 


3.4.4 Hardware Requirements for Various Subsystems 

The ATC system design must resoive the foiiowing ATC system hardware issues; 

• Roiiing Stock Tachometers; Roiiing stock tachometers wiii be mounted on the axie ends 
or on gearboxes. Simiiar devices are aiso required by the train propuision and brake 
systems for operation and for siip and siide controi. These devices generate puises as 
the axies rotate; connected equipment converts the puise into distance traveied. The 
speed and distance measurements are subject to errors from wheei wear, wheei siip, and 
wheei siide. Such errors occur despite the wheei siip and siide protection provided in the 
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propulsion and braking subsystems. The signai system suppiier wiii provide dedicated 
tachometers which wiii be instaiied in iocations provided by the roiiing stock suppiier, as 
defined in a detaiied interface definition. 

• Wayside Transponders; Transponders, where depioyed, wiii be mounted between the 
running raiis; each one provides a set of fixed or variabie data to the train when a 
transponder interrogator mounted under the train passes over the transponder. The on¬ 
board ATP equipment uses the data received from the transponder to correct any 
accumuiating positioning error in the on-board ATP subsystem. The error is generaiiy 
due to siip and siide between the wheeis and the raiis. The on-board ATP subsystem 
continuousiy assesses the worst case for error accumuiation and takes account of it in 
enforcing Movement Authority iimits. Transponders are caiied baiises in the ERTMS 
system specifications. The Eurobaiise works reiiabiy at 2QQ+ mph to ensure that the 
required amount of data capabie of being heid and transmitted by the baiise can be 
received by the train. 

• Other devices 

o GPS is being used to heip determine iocation by some PTC systems, in conjunction 
with tachometers. The use of GPS as a prime component of position determination 
in a vitai signai system wiii be chaiienging. There are iimits on GPS signai 
avaiiabiiity, for exampie when a train is operating through tunneis or in city areas with 
taii buiidings that can biock sateiiite reception. 

o Inertiai navigation systems, aithough proven in aerospace appiications, have iittie 
experience on raiiroads. Such devices incrementaiiy sum accelerations in the three 
axes to determine velocity, distance, and direction moved. They are subject to errors 
from train suspension effects and accelerations caused by discontinuities in the track. 

o One supplier has developed a laser optical sensor to measure distance traveled and 
actual speed with high accuracy. Although tested in a limited fashion on main line 
locomotives, the devices have been placed in revenue service on a transit application 
with a maximum speed of 50 MPH. Such devices are considered to be experimental 
and not fully mature in the railway environment. Any device using sensitive 
electronics and optics is likely to have reliability problems operating in the high shock 
and vibration and dirty environment around the truck and underside of a train. No 
optical device has been placed in service at high speeds. 


On-board ATP equipment can determine speed from some of the same devices, as described 
above. Tachometers, inertial devices, and GPS can determine speed very accurately when used 
in combination. 

Position determination using GPS would likely be in combination with tachometers and other on¬ 
board devices. Some development will be required however for a supplier to demonstrate in the 
system safety analysis that the specified criteria for reliability, availability, and safety can be met 
by the incorporation of GPS and other integrated devices. GPS receivers will likely be used to 
determine time for the system to ensure that safety-critical data received from the wayside and 
central office is current. 


3.4.5 Types of Data Transmission from Transponders 

The ATC system design must resolve the following issues with the data that will be transmitted to 
trains from the transponders; 

Transponders can be of two basic types; the first contains fixed data which is transmitted to trains 
as they pass over the location; the transponders have no electrical connection to any other ATC 
element. The second contains variable or fixed and variable data, and the connection to another 
ATC system element alters the transmitted data. For example, different speed limits can be 
transmitted if the switch ahead is in the normal or reverse position. 
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• The fixed data can simply be a unique iocation identification which the train ATP 
equipment compares to its database. The ATP equipment uses the data to correct the 
accumuiated error in its caicuiation of its position. 

• The fixed iocation identification data provides an absoiute confirmation of the train’s 
position. The on-board ATP equipment can use this as a diverse confirmation of train 
position. It can provide a positive confirmation of position if the train is operated under 
procedure through a switch with unknown status during faiiures. This is preferred to a 
Train Operator data input confirmation, as it enhances safety during faiiure conditions. 
These diverse data uses heip the ATC system achieve the required safety ievei. 

• The fixed data can inciude speed iimits which are transmitted to the on-board ATP 
equipment. However, the present design intention is that speed iimit data wiii be in the 
on-board database and transponders wiii not upioad this information. 

• Variabie data can inciude the iocations of trains and status of switches and routes in front 
of the train. 


An ATC system with transponder-oniy data transmission to trains can oniy provide intermittent 
ATP commands or Movement Authorities. This type of ATC system has performance and 
functionai constraints when compared to an ATC system with continuous communication of 
Movement Authority data. The CHSTP ATC system wiii be a continuous communication system, 
and wiii receive Movement Authority data either via a radio iink (such as with ERTMS) from 
wayside equipment or via a digitaiiy encoded track circuit transmission using the track circuits and 
running raiis (e.g., TVM430, Shinkansen, etc.). 

The ATC system design pians to use transponders for either radio or coded track circuit 
transmission, to provide the position error correction function for the on-board speed and iocation 
ATP subsystem. 


3.4.6 Location of On-Board ATC Equipment 

• ATC equipment wiii be mounted on the roiiing stock. These inciude Train Operator 
dispiays; the ATC controiier; ATC communications equipment; ATP subsystem iocation 
determination equipment (tachometer, GPS, inertiai navigation, transponder reader 
antennas, etc.); data radios; and antennas for GPS and data radios. 

• Much of this equipment is unique to specific ATC suppiiers; it shouid be suppiied by the 
ATC suppiier not the roiiing stock suppiier. 

• The interface between the train subsystems and the on-board ATC equipment is 
substantiai. 


The CHSTP Systems team wiii coordinate between the ATC, communications, roiiing stock, and 
operations personnei to discuss the equipment required and to provide in the roiiing stock design 
for; 


• physicai space requirements 

• mounting provisions 

• cabies and cabieways to connect the equipment 

• termination paneis 

• power and ventiiation needs 

• other considerations inciuding non-metaiiic paneis around radio and GPS antennas 
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3.4.7 ATC Safety Requirements 

The ATC system will be subject to an overall safety requirement. The CHSTP Systems 
engineers wiii estabiish a safety program covering the ATC system and its subsystems. The ATC 
safety program wiii aiiocate safety targets to individuai equipment items and subsystems. The 
CHSTP Systems engineers and ATC suppiier wiii perform ATC safety program tasks. 

The ATC suppiier wiii perform specified safety program activities, inciuding pianning, anaiysis, 
and reporting. Anaiyses wiii inciude Preiiminary Hazard Anaiysis, Fauit Tree Anaiysis, Faiiure 
Modes, Effects and Criticaiity Anaiyses (FMECAs) of train controi components. Operating Hazard 
Anaiysis, Subsystem Hazard Anaiysis, Sneak Circuit Anaiysis, and Hazard Resoiution Report. 

The CHSTP Systems Engineer wiii work with the ATC suppiier to prove and document that ATC 
software and data with safety-criticai functions or responsibiiity are deveioped, tested, integrated, 
maintained, ioaded, instaiied, updated, vaiidated, verified, and documented in a structured, 
documented program that is acceptabie to CHSTP. The specific means of achieving safety- 
criticai software wiii not be specified as there are muitipie industry-accepted means of achieving 
this. 

Carefui consideration wiii be given to the potentiai ATC suppiiers’ proposed methods for 
achieving safety-criticai software. Severai train controi projects have suffered deiays in recent 
years even with estabiished systems. The ATC suppiiers’ proposed methods wiii be reviewed 
and accepted if appropriate. 

To achieve safety-criticai software, the CHSTP wiii specify proven systems and oniy accept 
suppiiers with a proven capabiiity to provide the needed structured deveiopment environment. 
CHSTP wiii target a minimum of new or changed functions in order to minimize the risk to 
scheduie and budget posed by software deveiopment risks. 

The ATC safety requirements wiii inciude the need to deveiop a set of safe braking criteria that 
wiii be described as part of a modei. This safe braking modei wiii define the necessary criteria 
that the ATC and Roiiing Stock systems design must meet in order to satisfy the safe separation 
of trains, enforcement of home signais, and enforcement of speed iimits. 

The system design wiii inciude the abiiity for the ATC subsystem to command both a controiied 
emergency brake in which wheei siide protection is active, and an absoiute emergency brake in 
which wheei siide protection is cut out. 


3.4.8 Reliability, Availability, and Maintainability of the ATC System 

The ATC system must have extremeiy high avaiiabiiity to avoid deiays caused by ATC system, 
subsystem, and equipment faiiures. Different degrees of redundancy are appropriate for different 
portions of the ATC system to achieve avaiiabiiity targets and minimize the faiiure rate and the 
mean time to repair. 

The CHSTP Systems team wiii set up diaiogue between ATC design, ATC and computer 
maintenance personnei. Operations, and system safety personnei, to determine and specify the 
acceptabie ieveis for these targets. 

The ATC suppiier wiii perform specified reiiabiiity program activities, inciuding pianning, anaiysis, 
and reporting. Anaiyses wiii inciude reiiabiiity aiiocation, historicai reiiabiiity anaiysis, avaiiabiiity 
and reiiabiiity prediction, and an avaiiabiiity and reiiabiiity Demonstration. 


3.4.9 Data Radio Requirements 

The ATC system wiii inciude high speed, high avaiiabiiity data radio equipment and iinks, with 
comprehensive and iikeiy overiapping coverage throughout aii main iine and Yard tracks. 

Radio aiternatives wiii be investigated by the Systems team for appiicabiiity (performance, 
coverage, avaiiabiiity, etc.) of the frequencies and bandwidth. Existing and emerging pubiic 
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standard systems will be considered. This wiii be done with the communications group working 
cioseiy with the ATC group. 


3.4.10 ATC Requirements on Common Corridors 

The extent of shared use operation on the LOSSAN and Caitrain corridors has yet to be finaiized. 
The Caitrain corridor must operate with an FRA-approved PTC by the end of 2015. 49CFR236 
Subpart I aiso mandates interoperabiiity between any two PTC systems whose iocomotives 
interoperate. The host raiiroads (those that own the tracks in a particuiar iocation) must define 
and procure the wayside PTC system, and make suitabie arrangements with tenant operators on 
the iine. 

The CHSTP approach to ATC definition is to focus on the ATC system outside the common and 
shared use corridors. The ITC PTC system, which is iikeiy to be used by potentiaiiy 
interoperating raiiroads, has not yet been defined to the degree required to achieve 
interoperabiiity. Therefore it is not possibie to determine if the ITC PTC system can meet the 
CHSTP safety, functionai, and performance requirements. The prime quaiification for the CHSTP 
ATC system is that it has operated in revenue in a simiiar environment and at the speeds 
targeted (up to 250 mph). 

The ITC PTC system will be based on an existing product, with significant changes now being 
made to meet the detailed requirements of the Class 1 freight railroads, including a new wireless 
network system and radio hardware. It is unlikely the ITC PTC can serve as the CHSTP ATC 
system. 

The feasibility of CHSTP trains and other trains to operate on the same tracks, including Caitrain 
and other regional commuter train tracks, can only be fully addressed after the ITC PTC system is 
fully developed. Consideration will be given then to interoperable operations including the 
interoperability between CHSTP ATC and ITC PTC systems, the dual equipping of shared 
wayside territory, or the dual equipping of trains such that the operational and safety criteria of all 
affected rail operators can be met. 


3.5 Interfaces 

The ATC system will have interfaces to the following subsystems. 


3.5.1 Rolling Stock 

There will be significant mechanical, electrical and logical interfaces between ATC and the rolling 
stock. The specifics will depend on the final requirements of functionality. For example, ATO 
operation is currently planned. It has not yet been decided whether correct side door interlocking 
is required. If so, this function would be coupled with a berthing function that would prevent doors 
being opened unless the train is correctly stopped within the limits of a platform. These functions 
would entail specific interfaces to be defined and detailed at both the bid specification and 
procurement stages. 

As Rolling Stock is likely to be procured separately from the ATC system, a significant amount of 
detail must be agreed such that the Rolling Stock side of the interface can be included in the 
scope of the procurement. 


3.5.2 Communications 

Interfaces between the ATC system and the Communications system are extensive. If 
an ERTMS train control system is selected, data and voice radio communications will be 
integral with the overall ATC subsystem. 
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3.5.3 Traction Power 

The ATC track circuit bonding and grounding must be compatible with the needs of the 
traction power subsystem. 


3.5.4 OCS 

It is anticipated that the ATC system may be required to impiement two functions; 

• On-board commands to the Roiiing Stock equipment to isoiate between section gaps as 
the train traverses the gap. This can be driven by a database function where the section 
gaps are identified in the on-board database 

• Prevention of trains entering sections of the iine where the OCS has been de-energized. 
This wiii require an interface between the OCS energized indication and the ATC system. 
This couid be done at the OCC ievei with an interface between ATS and SCADA, or at a 
iocai ievei. Modified movement authorities wouid be transmitted to the on-board ATC 
and a stop enforced. 

3.5.5 Track 

The detaiis of the track iayout inciuding switch configurations, gradient, curvature, etc. must be 
inciuded in the safety-criticai ATC database. There wiii aiso be physicai interfaces between the 
switch machines and the switches themseives, between the track and ATC transponders where 
the iatter must be secureiy fixed to the track and maintained within strict toierances, and cabie 
bonds to the track for track circuit and traction power suppiy continuity. 

In the Yards, derails and other devices used for stop signal enforcement must also be fixed to the 
rails requiring an interface definition. 


3.5.6 Infrastructure 

The ATC system interfaces with infrastructure for installation of equipment houses, cases, 
signals, and other elements along the right of way, and to comply with clearance requirements 
and access to the various ATC facilities. Basic footprint, equipment size, and access needs have 
been provided to the infrastructure group. 

Special considerations have been given to tunnel portals for the need to house ATC equipment in 
buildings and other structures at these locations. 


3.5.7 System Time 

The ATC system will derive its time standard from received GPS signals. 


3.6 Applicability to U.S. Standards 

There are several sets of standards that can be applied to the ATC system. However, some 
aspects of standards including the AREMA Manual of Recommended Practices for Signaling and 
Communications may preclude service-proven systems that were designed to Euronorms or 
other foreign standards. Where possible, equivalency will be demonstrated. In some cases the 
Euronorm will be accepted as an applicable standard in the specifications. 

Even though technical equivalency may not be able to be fully demonstrated, there is a need to 
demonstrate an equivalent level of safety. 
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4.0 SUMMARY AND RECOMMENDATIONS 

In summary the ATC system will consist of the eiements described in this Technicai 
Memorandum. The ATC system must be proven in a high speed (200 MPH pius) environment 
with a minimum of modification to compiy with CFR Reguiations and with technicai issues such 
as avaiiabie frequencies and bandwidth. 

Wayside signais wiii be kept to a minimum and provided oniy at interiockings and in yards. 

ATO mode functionaiity wiii be provided as described. ATO mode wiii be avaiiabie on the main 
iines and on transfer tracks between Yards and the Main Lines. ATO mode wiii not be avaiiabie 
within any yard. 

Yard train movements wiii be authorized by wayside signais which wiii be enforced. 

The ATC system wiii enforce speed iimits both temporary and permanent when in fuii ATC modes 
and in Yard and Restricted Manuai Modes. The Roiiing Stock subsystem wiii enforce the speed 
iimit as prescribed by 49CFR236 Subpart I when the ATC on-board system is bypassed. 

The ATC system specifications wiii be written for functionaiity, performance, and system 
assurance (Reiiabiiity, Avaiiabiiity, Maintainabiiity, and Safety (RAMS)). The ATC system 
specifications wiii not specify a particuiar product or architecture. 

The PTC functionai requirements of the RSIA wiii be specified. Because of many unknown 
eiements inciuding the extent of interoperation of trains on common corridors and detaiis of the 
ITC PTC currentiy under deveiopment by the freight raiiroads, the CHSTP ATC system wiii 
continue to be deveioped without specifying direct interoperabiiity with ITC. 
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5.0 SOURCE INFORMATION AND REFERENCES 

• AREMA Communications & Signais Manuai of Recommended Practice 

• 49CFR Part 229 
. 49CFR Part 236 
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6.0 DESIGN MANUAL CRITERIA 

6.1 Information for Inclusion in Design Manual 

The CHSTP Project requires the deployment of an ATC system that supports the performance 
goals of the project including maximum speeds, trip times, and headway and that meets various 
sets of federaiiy mandated practices and functions for a signaiing system inciuding Positive Train 
Controi (PTC). The ATC system must ensure the foiiowing key safety functions; 

• Safe train separation 

• Prevention of overspeed deraiiments 

• Faii safe train detection 

• Broken raii detection 

• Interiocking ruies enforcement 

• Hazard detection system responses 

• Work zone protection 

The overaii ATC system must incorporate the functionai areas of Automatic Train Protection 
(ATP), Automatic Train Supervision (ATS), and Automatic Train Operation (ATO). These three 
functionai areas of the ATC can be briefiy defined as; 

• ATP - Automatic Train Protection - The functionai set responsibie for the safety-criticai 
functions inciuding those of interiocking, train detection, signai aspects, broken raii 
protection, hazard detectors (if impiemented as part of the ATC system), and movement 
authorities (inciuding speed iimit and cab signai commands if appropriate) that are sent to 
the train and acted upon by the on-board train controi to enforce safe iimits. The ATP 
functionai set inciudes the enforcement of the safety-criticai functions. PTC functions are 
part of ATP. 


• ATO - Automatic Train Operation - The functionai set responsibie for the automatic 
operation of throttie and brake commands to move trains between stations and other 
stopping iocations (inciuding those required due to the proximity of other trains and signai 
status) within the constraints imposed by the ATP functionai set. Provides dweii timing at 
stations and the controi or prompting of the opening and ciosing of train doors. 


• ATS - Automatic Train Supervision - The functionai set within the automatic train controi 
system that is responsibie for the centraiized supervision and controi of train movements; 
the ATS monitors trains, adjusts the performance of individuai trains to maintain 
scheduies, and provides data to adjust service to minimize inconveniences otherwise 
caused by irreguiarities. ATS aiso provides automatic route setting at interiockings and 
the identification and tracking of trains, the dispiay of aiarms and events, and iogging and 
storage of event data. 


In consideration of the requirements of the signaiing reiated sections of the Code of Federai 
Reguiations (CFR) to provide a proven means of detecting possibie broken raiis, CHSTP wiii 
specify track circuits. This makes the European ied radio based train control system; ERTMS 
Level 2 a strong contender for the train controi technoiogy for the foiiowing reasons; 

• ERTMS Levei 2 uses track circuits as a primary train iocation subsystem 

• It has been widely deployed on high speed rail routes in Europe and other countries and 
is therefore an in-service proven system 

• It has been deployed on systems with similar maximum speeds and headways as 
CHSTP design goals 
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• There are multiple suppliers of hardware and software; these suppiiers have subsidiaries 
in the United States 

The definition of an ERTMS system inciudes the train controi data and operations voice radio 
communication between the wayside and the trains. The EIRENE (radio) component of ERTMS 
operates in the GSM bandwidth that has been dedicated throughout Europe for raiiway 
operations (GSM-R (Raiiways)) and carries both voice and train controi data circuits. There is no 
GSM-R frequency band dedicated to raiiroad operation in the United States. If an ERTMS-type 
system is to be depioyed on CHSTP and channeis in the appropriate frequencies cannot be 
secured from the FCC, the system wiii require adaptation with respect to data and voice radio 
communications. 

Other proven ATC systems that possibiy meet the high speed experience criteria inciude the 
TVM430 coded track circuit based system (originaiiy deveioped by CSEE, now a division of 
Ansaido) and reiated products that are based on coded track circuits, and Japanese coded track 
circuit technoiogy depioyed on the Shinkansen and Shinkansen derivative iines in Japan and 
other countries inciuding Taiwan. 

ERTMS and coded track circuit type systems have significant differences; ERTMS detects train 
position using track circuits but conveys safety-criticai information to trains in the form of 
movement authorities by means of a data radio network, coded track circuit type systems detect 
train position using track circuits but aiso send data to trains through the track circuit (running 
raiis) simiiar in concept to the way in which conventionai cab speed signais systems have worked 
for many years. The iatest digitai track circuits aiiow for much higher data rates (than 
conventionai cab signaling circuits) aiiowing messages to be sent to trains in reai time and 
convey much more information than the traditionai maximum speed iimit. 

To take advantage of the two generai types of ATC system (coded track circuit and radio network 
based) with high speed raii proven experience, the design criteria wiii address an ATC system 
specification that focuses on function and performance and aiiows coded track circuit or radio 
based systems to be proposed. 

This Technicai Memorandum describes the functions within each of the ATC subsystems; ATP, 
ATO, and ATS; and identifies how these functionai subsystem requirements wiii be deveioped 
and met by the train controi design, specification, and impiementation phases. 

The prime requirement for the train controi system to be used on the CHSTP system is that the 
technoiogy must aiready exist as part of an operating system with proven experience woridwide 
on at ieast one high speed passenger raiiway. 

Any candidate technoiogy must aiso meet or be modified to meet the reguiatory requirements 
from authorities inciuding FRA, FCC, and CPUC. 


6.2 General Information 
6.2.1 Definition of Terms 

The terms iisted beiow are train controi reiative definitions and acronyms. A compiete giossary of design 
terms, abbreviations and acronyms used by the Project are contained in Technicai memorandum TM 
0.0.a; Design Terms, Abbreviations, and Acronyms. 


Absoiute Biock - A section of track on which a train is not permitted to enter whiie it is occupied by 
another train. 

Automatic Train Controi ; (ATC) The coiiective name for the train controi subsystems that typicaiiy 
comprise the Automatic Train Protection, the Automatic Train Operation, and 
Automatic Train Supervision sets of functions that govern train operations on the 
main iines. 
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Automatic Train Control Bypass : A state in which the ATC system is bypassed under faiiure 
conditions that aiiows the train to be operated manuaiiy at speeds that are 
mandated by operating procedures. 

Automatic Train Controi Main Line Territory ; Territory equipped with ATC wayside equipment with 
fuii ATP functionaiity. 

Automatic Train Controi Yard Territory : Territory equipped with ATC wayside equipment in the 
Yard areas. 

Automatic Train Operation : (ATO); A mode of operation for onboard train ATC equipment used 
to move the train to the next station under ATP supervision. 

Automatic Train Protection : Those functions within the ATC that ensure safe train separation, 
preciude overspeed operation, and preciude operation outside of safe iimits (e.g. 
over an improperiy set switch). 

Automatic Train Supervision : (ATS) Those functions within ATC that are for train dispatching 
and aiiow the monitoring and controiiing (both manuai and automated) of 
operations and traffic on the raiiroad. 

Dwarf Signai A iow wayside signai with minimai preview as opposed to a high signai that is 
used to provide adequate preview of the aspect dispiayed to high speed trains. 

GSM-R: The radio version of the Giobai System for Mobiie communications (originaiiy from 

Groupe Speciai Mobiie) used on raiiroads for controi system in Europe and 
possibiy to be adapted for CHSTP 

Guaranteed Emergency Brake Rate : The minimum emergency brake rate achieved under the 
range of environmentai conditions and brake equipment faiiure modes which can 
normaiiy be anticipated to exist on the CHSTP system 

Headway; The time between buses, trains, or other transit vehicies at a given point. For 
exampie, a 15 - minute headway means that one train arrives every 15 minutes. 

Home Signai - A fixed signai (wayside or virtuai) at the entrance of a route to govern trains 
entering or using that route. 

Impedance Bond; An eiectricai device iocated between the raiis consisting of a coii with a center 
tap used to bypass insuiated joints in order to prevent track circuit energy from 
bypassing the insuiated joint whiie aiiowing the traction return current to bypass 
the insuiated joint. The center tap can aiso be used to provide a connection from 
the raiis to the static wire and/or traction power faciiities for the traction return 
current. 

Insuiated Joint: A joint in the running raii used to prevent track circuit energy on one side of the 
joint from ieaking to the other side of the joint. 

Interiockinq An arrangement of signais (wayside and/or virtuai) and switch appiiances so 
interconnected that their movement must succeed each other in proper sequence 
and for which interiocking ruies are in effect. 

Interiockinq Siqnais Fixed signais which govern the movement of trains through Interiockings 
that are observed by the train operator under ATC faiiure conditions at reduced 
speed. 

Interoperabiiitv: In the context of the European High-Speed Lines, is the abiiity of the European 
High-Speed iines raiiway network to aiiow high-speed trains to run safeiy and 




CALIFORNIA 


Page 35 





















California High-Speed Train Project 


Automatic Train Control; Concept of System, RO 


continuously with the specified performances. It is based on the whoie of the 
iegai, technicai, safety, and operationai conditions that must be fuifiiied to satisfy 
the necessary requirements. Thus, for exampie, a German high-speed train 
satisfying the requirements of the Roiiing Stock Technicai Specification for 
Interoperabiiity (TSI) is abie to run safeiy and continuousiy on a French high¬ 
speed iine of which the infrastructure is satisfying to the different requirements of 
the different infrastructure Technicai Specifications for Interoperabiiity. These TSI 
design standards were deveioped specificaiiy for the design, construction and 
operation of interoperabie high-speed raiiways in Europe and are based on 
European and internationai best practices. 

Intrusion: An errant vehicie’s exit out of its right-of-way and entry into the operating space of 
another transportation system’s right-of-way. 

Intrusion Detection: An eiectronic system that aiarms the intrusion event to the Centrai Controi 
and to the Train Operators. A dedicated detection system may be used for non- 
vehicuiar intrusion such as for peopie or animais. 

Main Line: The tracks aiiocated to the high-speed train traffic at normai commerciai speed and 
not normaiiy used for switching or storage. 

Movement Authority : The vitai information used by the on-board ATC system to determine the 
position on the track (or iimit) to which it can safeiy move under ATC supervision, 
inciuding the speed iimits both permanent and temporary that must be observed 
between its current position and the Movement Authority iimit. 

Non-Vitai : A designation piaced on a system, subsystem, eiement, component, or function 
denoting that satisfactory operation of such is not mandatory for safety. 

Operations Controi Center (OCC): A centraiized controi faciiity from which raiiroad 

operations are supervised and controiied. The main controi enter can be 
supported by Regionai Controi Center(s) from where specific regions or branches 
of the system can be supervised and controiied and that can act as a back-up 
controi faciiity in the event of a faiiure of the OCC. 

Positive Train Controi (PTC): A proactive train controi system that prevents train coiiisions, 
deraiiments due to overspeeding, and protection of work zones on or about the 
tracks. 

Radio Frequency: The frequency range of the eiectromagnetic spectrum that is used for radio 
communication. 

Raii Safety Improvement Act (2008): An Act of Congress that mandates the implementation of 
Positive Train Control on certain rail lines (including those over which passenger 
trains operate) by the end of 2015 

Regional Control Center (RCC): A control facility from which a specific region of the CHSTP is 
supervised and controlled. The RCC can act as a back-up control facility in the 
event of a failure of the OCC. 

Restricted Manual : A mode of operation under wayside signal and procedural protection with train 
speed limited by the on-board ATC equipment. 

Restricted Speed : Operation at no greater than twenty (20) miles an hour, prepared to stop 
within one half (1/2) the range of vision. 
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Shared Riaht-of-Wav : A CHSTP alignment where high-speed trains operate in proximity to other 
transportation systems, inciuding conventionai passenger raiiroads and freight 
raiiroads, without sharing tracks. Aiso inciudes highways. 

Shared Use Corridor: A CHSTP aiignment where high-speed trains operate with other passenger 
and freight raiiroads (e.g., Caitrain, Metroiink, Amtrak, UP, and BNSF) and share 
the corridor. 

Shared Use Track: Segment aiong the CHSTP aiignment where high-speed trains operate with 
other passenger and freight raiiroads, (e.g., Caitrain, Metroiink, Amtrak, UP and 
BNSF) on the same tracks. 

Signai Aspect : The appearance of a fixed signai conveying an indication as viewed from the 
direction of an approaching train; the appearance of a cab signai conveying an 
indication as viewed by an observer in the cab. Fiashing or iack of fiashing of a 
iight is a part of the aspect. 

Signai Biock : A iength of track of defined iimits, the use of which is governed by the ATC 
system; a Signai Biock may inciude one or more Track Circuits. 

Signai Indication ; The information conveyed by a signai aspect. 

Track Circuit; A method of determining occupancy of a section of track and/or a broken raii by 
sending an eiectricai signai down the track from the transmit to the received end 
of the section of track and indicating that the section of track is compete and not 
occupied by detecting a minimum ievei of the proper signai at the receive end. 

Train Operator’s Dispiav; An indication in the Train Operator’s cab that provides the status of 
the ATC system and the safe iimits within which the train may operate 

Virtuai Signai; A database eiement that repiicates the function of a wayside signai in the ATC 
system but with no physicai signai instaiied at the wayside. 

Vitai; A designation piaced on a system, subsystem, eiement, component, of function 

denoting that satisfactory operation of such is mandatory for safety. 

Wayside Signais; Devices iocated aiong the right-of-way for providing information to the Train 
Operators reiative to train operations as opposed to the cab signai dispiays that 
are iocated within the controi compartment of the roiiing stock. 

Yard Signai System; The train controi system that controis safe train movements within the 
iimits of Yard Tracks. 

Yard Track; A section of track used for storage of trains that is auxiiiary to the main track and 
not used by trains that are carrying passengers. Refuge tracks at stations are 
yard tracks. Yards consist of more than one yard track used for storing trains, 
inspecting trains, and accessing maintenance faciiities. Yard tracks may or may 
not have track circuits on them. 

Yard Transition Tracks; A section of track used for the transition of trains between the main iines 
and Yard Tracks. Transition Tracks are equipped with both the main iine ATC 
system and the Yard Signai System. Yard transition tracks shaii be track 
circuited. 
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6.2.2 Acronyms 

Several acronyms have different definitions depending on the technicai area in which they are 
used. The foiiowing iist is of acronyms identified thus far by the CHSTP. 

A 


ATC 

Automatic Train Controi 

ATO 

Automatic Train Operation 

ATP 

Automatic Train Protection 

ATS 

Automatic Train Supervision 

C 


CTS 

Communications Transmission System 

D 


DCS 

Data Communications Subsystem 

E 

ERTMS 

European Raiiway Traffic Management System 

ETCS 

European Train Controi System 

F 


FCC 

Federai Communications Commission 

FRA 

Federai Raiiroad Administration 

G 


GPS 

Giobai Positioning System 

GSM-R 

Giobai System for Mobiie Communications - Raii 

0 


occ 

Operation Controi Center 

ocs 

Overhead Contact System 

p 


PTC 

Positive Train Controi 

R 


RCC 

Regionai Controi Center 

S 

SCADA 

Supervisory Controi and Data Acquisition 

T 


TCC 

Train Controi and Communications 


6.2.3 Units of Measurement 

The Caiifornia High-Speed Train Project is based on U.S. Customary Units consistent with 
guideiines prepared by the Caiifornia Department of Transportation and defined by the Nationai 
Institute of Standards and Technoiogy (NIST). U.S. Customary Units are officiaiiy used in the 
United States, and are aiso known in the US as “Engiish” or “Imperiai” units. In order to avoid 
confusion, aii formai references to units of measure shouid be made in terms of U.S. Customary 
Units. 
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6.3 ATC Design Criteria 

The overall term used to define the train controi system used in main iine territory (i.e. not Yard 
tracks) is Automatic Train Controi (ATC). 

6.3.1 ATC Functional Groups 

ATC shaii be divided into three functionai areas: 

• Automatic Train Protection (ATP); 

The subsystem within the automatic train controi system that maintains faii-safe 
protection against coiiisions, excessive speed, and other hazardous conditions through a 
combination of train detection, train separation, and interiocking. 

• Automatic Train Operation (ATO); 

The subsystem within the automatic train controi system that performs any or aii of the 
functions of speed reguiation, programmed stopping, door controi, performance ievei 
reguiation, or other functions otherwise assigned to the train operator. 

• Automatic Train Supervision (ATS); 

The subsystem within the automatic train controi system that monitors trains, adjusts the 
performance of individuai trains to maintain scheduies, and provides data to adjust 
service to minimize inconveniences otherwise caused by irreguiarities. ATS aiso 
provides the means by which switches are aiigned and signaied routes are set and 
cieared both automaticaiiy and by manuai input. 


The ATC system shaii aiso be subdivided into physicai subsystems; each subsystem contains 
differing sets of functions drawn from the above three functionai groups. The physicai 
subsystems are as foiiows; 

• Wayside - consists of equipment iocated in housings aiong the right of way inciuding 
station equipment rooms, train controi equipment houses, and signai equipment cases 
and cabinets. The equipment inciudes track circuits, switch machines, wayside signais, 
interiocking equipment, and transponders (or baiises), much of which is considered to be 
conventionai signai system equipment. This equipment inciudes ATP eiectronics that is 
either integrai with or interfaces to the track circuit and interiocking equipment and to 
other sensors inciuding intrusion, seismic, and other detectors that wiii aiiow the train 
controi system to react to an event and bring the train to a safe speed if necessary. The 
ATP processors obtain track circuit occupancy status, interiocking route status, and 
sensor device status in order to output messages to the trains that define the safe iimits 
(inciuding distance to go and target speeds) for train movement. Equipment wiii be 
housed in a distributed fashion aiong the raii iine to provide continuous coverage 
inciuding on aeriai structures, in tunneis, yards, and stations. 

Interiocking functions inciuding route setting, route iocking, approach iocking, and 
sectionai reiease wiii be performed by wayside microprocessor interiocking equipment. 

The wayside subsystem wiii be iinked by the data communication subsystem to aiiow 
supervision and remote controi from the Operations Controi Center (OCC). 

• On-board - This subsystem consists of equipment iocated on the passenger trainsets 
and maintenance vehicies and inciudes processors, firmware, software and eiectronics, 
operator dispiays, operator switches, data radios and antennas, transponder/baiise 
antennas, code pick-up antennas, network components, GPS receiver and antennas, 
tachometers and other sensors, and aii connections between train controi eiements and 
interfaces between train controi and the train subsystems inciuding propuision and 
brakes. Sensors and processors are used to determine position and speed, computer 
equipment, and operator controis and dispiays. Depending on the train controi 
technoiogy seiected, the on-board equipment may aiso inciude data radios and antennas 
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with which to communicate with the wayside and centrai controi subsystems. The on¬ 
board subsystem may aiso inciude antennas and decoding equipment to detect digitai 
signais transmitted to the train through the raiis. The on-board package wiii receive data 
through the radio or the raiis that define the movement authorities within which the train 
can safeiy operate. The actuai speed of the train wiii be continuousiy compared to the 
authorized speed. If the train is to operate in ATO, the ATO functionai set wiii handie any 
changes in speed caiied for. If the train approaches an overspeed condition the ATP 
functionai set wiii generate a warning to the train operator. If appropriate action is not 
taken, the on-board system wiii intervene to ensure that the train movement stays within 
safe iimits. 

The on-board ATC wiii use sensors to determine the train’s position to a high ievei of 
resoiution both iateraiiy (which track the train is on) and iongitudinaiiy, as weii as 
accurateiy measure speed. The enforcement of the Movement Authority iimits enabies 
the on-board system to provide the required PTC protections. 

The onboard ATO functionai set wiii reguiate train performance when seiected. 
Commands received from the ATS functionai set may aiso provide for pacing trains at a 
iower speed than their maximum speed or increasing speeds from the pacing speed 
caiied for by the normai scheduie. Under no circumstances can these ATO functions 
aiiow the train to operate faster or further than the safety-criticai iimits determined by the 
PTC functions of the ATP functionai set. 

The on-board ATC subsystem wiii interface with the roiiing stock subsystems to support 
the ATP, ATO, and ATS functionai sets. 

In addition to interfaces required for the ATC system functions, additionai train interfaces 
wiii provide remote monitoring capabiiities of roiiing stock subsystems. Remote 
monitoring aiiows for eariy diagnosis of troubie. Monitoring can be done using the office 
subsystem as part of the ATS functionai set. Aiarms and event indications can be 
dispiayed at the Operations Controi center and the Regionai Controi Centers, or at ATS 
remote workstations at other iocations. 

On-board passenger information systems, inciuding audibie and visuai announcements 
of reai-time performance and other information to the passengers may be provided from 
the Office subsystem through the ATC data communications subsystem or by an 
independent data communications subsystem. 

The on-board ATP functionai set equipment wiii interface to wireiess or above-raii 
inductive antennas that receive Movement Authority commands from wayside ATP 
functionai set equipment. A data radio subsystem wiii provide data transmission between 
the train and wayside. 

• Data Communications Subsystem (DCS) - Communicates data, commands, 
indications and aiarms between ATC subsystems and iocations. This consists of 
connected networks of wireiess, fiber optic, and hardwired equipment. 

The DCS wiii carry both safety-criticai and non-safety-criticai (management) information. 
The DCS itseif does not have to be a safety-criticai system. Coding and other techniques 
in the other ATC subsystems ensure that the data received is of sufficient integrity and 
currency that it can be treated as accurate for safety-criticai appiications. ATP 
equipment wiii reject any safety-criticai data that cannot be vaiidated. 

Many DCS eiements, inciuding eiectronics, fiber cabies, radio equipment, and antennas 
wiii be on CHSTP property. However, the diversity that may be needed to deiiver the 
specified communication iink avaiiabiiity may require the use of ieased communications 
iines provided by a third party as backup to the primary iinks. Some radio antennas may 
aiso be iocated off CHSTP property where propagation considerations indicate a benefit. 

The candidate ATC system ERTMS uses 900 MHz GSM-R radio to communicate 
movement authorities and safety-criticai data between train and wayside. Possibie use of 
GSM-R in the U.S. is being reviewed by CHSTP Systems Group, as weii as aiternative 
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frequency bands, including the use of Long term Evoiution (LTE) wireiess network 
technoiogy. 

• The Office subsystem supports the majority of the ATS functionai sets. It consists of a 
centraiized or a distributed computer controi system with dispatcher workstations that 
provides the overaii CHSTP train operation management functions inciuding remote 
routing and supervision functions. It includes announcements of events including critical 
alarms and a logging capacity for all events. It generates many system performance 
reports. Many ATS functions supported by the Office subsystem are automated, 
including setting of routes at interlockings, regulation of train movements in accordance 
with the schedule, and the recovery of the service from interruptions and failures. 

At any time, dispatchers can take manual control of route setting and schedule regulation 
functions from their ATS workstations, in accordance with the rail management plans 
and procedures. 

The Office subsystem architecture can be centralized or distributed to provide reliable 
computing power and the required workstations that allow supervisors to dispatch the 
services, monitor subsystem performances, and intervene to manually supersede 
automated processes in the event of incident and emergency. The territory controlled by 
each workstation can be adjusted by users and/or administrators to adjust to workload 
demands as they fluctuate. As workstations can be in a centralized facility and at remote 
locations, the ATC system can support a flexible approach to the overall supervision of 
the CHSTP rail operations. 

The Office subsystem communicates with wayside locations, remote workstations, trains, 
other ATC elements, and sensors including intrusion, through the data communications 
subsystem. 

• Field Portable - Equipment for use by Employees in Charge (EIC) of wayside work; 
used to manage track and other wayside systems access. EIC portables will 
communicate digitally and wirelessly with the ATS and with on-board ATC subsystems to 
control train movements through a work zone. Trains may only operate through 
established work zones with the agreement of the EIC who can use the field portable 
equipment to enforce reduced speeds and track blocks. Although generally maintenance 
work on the tracks will be done outside of revenue hours, EIC portables will protect all 
worksites and zones on or about the track, from movements of ATC-equipped 
maintenance vehicles and passenger trains. 

• Yard - Equipment distributed throughout the yards and maintenance facilities for the 
operation of switches, and to provide wayside illuminated signals, and enforcement 
devices to control trains movements within Yard territory. Red signal aspects shall be 
enforced such that trains cannot pass a signal displaying a stop indication and cannot 
enter an unlocked switch or stop foul of a train movement authorized on another track. 

Control of the Yard signaling systems shall be from a panel or workstation located in a 
control room (or tower) within the yard facility. 

Train movements between yards and the main line shall be routed through transition 
tracks where trains will transition between ATC and Yard signal system modes of 
operation. 
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6.3.2 Positive Train Controi (PTC) 

The ATC system for CHSTP shall include the functions of Positive Train Controi (PTC) that shaii 
meet the objectives of PTC as defined by the Raii Safety Improvement Act of 2008. For CHSTP, 
PTC shall be an integrated set of functions within the ATC system where train coiiision and 
overspeed protection as weii as the protection of roadway workers shaii be enforced. Aithough 
many “PTC” systems are being impiemented as overiays on conventionai wayside signai systems 
in order to meet the RSIA deadiine of the end of 2015, PTC for CHSTP shaii be an integrai part of 
the ATC system. 

For high speed operation, the safety of the train must be assured by an automatic system that 
enforces speeds at aii times inciuding the siowing of a train for an obstruction of the iine ahead. 
Such obstructions can inciude a train ahead, a reduction in the civii speed iimit (permanent and 
temporary), and an unset or uniocked switch in an interiocking ahead of the train. 

The basic safety-criticai functions of the ATP portion of an ATC system are as foiiows; 

• Enforce aii speed iimits on a train to prevent overspeeding through curves, switches, 
work zones, and other features that require speed supervision and enforcement to 
ensure safe operation. 

• Ensure trains are separated to avoid rear end and side swipe coiiisions. 

• Prevent deraiiments and coiiisions from movements through incorrectiy set and/or 
uniocked switches and from confiicting train movements by setting and iocking switched 
routes through an interiocking and oniy authorizing safe train movements through the 
interiocking 

6.3.3 Interface to Event Detectors and ATC System Responses 

The train controi system shaii aiso provide safe enforcement of other functions inciuding pianned 
responses of the overaii ATC system to event detectors and sensors (provided by other 
subsystems) inciuding; 

• Earthquake 

• Excess wind speed 

• High water ieveis 

• Excessive rainfaii 

• Underpass bridge strikes 

• Landsiide and rock faiis 

• Intrusion at trackside and in tunneis 

• Intrusion from overhead bridges and at tunnei portais 

• Intrusion at stations 

• Dragging equipment 

• Raii breaks 


Aithough the majority of the iisted event sensors wiii be specified by other discipiines, many wiii 
be interfaced to at ieast one of the subsystems of the ATC, and the ATC shaii invoke the system 
response. In some cases, the ATS subsystem shall be required to iog the event and to dispiay 
an event and/or an aiarm to the operators, in other cases the ATP system shaii be required to 
directiy invoke a response of the train, enforcing a braking activation and possibiy stopping trains 
in an emergency. Each sensor interface must be identified and the response of the ATC system 
to each interface agreed with Operations and other discipiines. 

Dragging equipment detectors may need to be provided in the event that shared corridors and 
tracks become part of the operationai requirements. 
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6.3.4 Broken Rail Detection 

In the case of broken rail, the approach being taken is that the ATC fieid component shaii inciude 
doubie raii track circuits for train detection. Track circuits are an approved means of detecting 
broken raiis and this approach is acceptabie to the FRA. A break in the raii shaii cause a faise 
occupancy in a track circuit which in turn shaii resuit in a restrictive command to an approaching 
train. In order for track circuits to reiiabiy detect broken raiis and to be abie to provide a ievei of 
protection to trains by means of the ATC system, the ATC system shaii normaiiy aiiow oniy one 
train in a track circuit at any one time. 

In addition to safety-criticai functions, the train controi system shaii aiso provide the train 
management functionaiity in which the effective and efficient operation of a passenger train 
service is assured; such functions inciude automated routing and scheduiing of trains and a 
means for dispatcher intervention to deai with incidents and emergencies. 

The train controi system shaii consist of severai eiements (or subsystems) that are cioseiy 
integrated to provide an overaii soiution for high speed train operations. The train controi system 
must be cioseiy integrated with other system eiements, such as roiiing stock, intrusion detectors, 
and hazard detectors, to ensure the necessary ievei of safe operation. 
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6.3.5 ATC - Modes of Operation 

This section describes the proposed modes of operation of trains. 

The foiiowing matrix of operating modes and sub-modes has been identified; 


MODE OF 
OPERATION 

ATO OR 
MANUAL 
OPERATION 

MAX TRAIN 
SPEED 

ENFORCED BY 

NOTES 

ATC 

ATO 

Line Speed or as 
defined by Limit 
of Movement 
Authority 

ATP 

This is the normal operating mode on the main line which includes automatic 
operation of Rolling Stock propulsion and brakes by the ATO subsystem 
within ATC. 

Requires an action by the Train Operator to select ATO mode. ATP system 
must determine that other factors are correctly set before train can move in 
ATO mode (Movement Authority is being received by on-board ATP 
subsystem, doors are closed and locked, etc.) 

Rolling Stock subsystem requirement must include the incorporation of the 
vigilance/alerter device to ensure The Train Operator is in the cab and alert. 
Rolling stock vigilance/alerter device is required in all modes of operation 
including ATC, RM, Bypass Yard, etc. 

ATC 

Manual 

Line Speed or as 
defined by Limit 
of Movement 
Authority 

ATC 

This is the operating mode on the main line where movements and speeds 
are fully supervised and enforced by the ATC system but the propulsion and 
brakes are commanded by the Train Operator 

Vigilance/alerter function to be provided by Rolling Stock; see note above. 

CHSTP ATC may include a Call-On mode to allow the train to pass a red 
signal under certain controlled conditions. If so, this will be a sub-mode of 
ATC/Manual. To enter it, the ATC system shall send the train a Call-On 
command. ATP shall enforce a speed limit of 20 MPH. 
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MODE OF 
OPERATION 

ATO OR 
MANUAL 
OPERATION 

MAX TRAIN 
SPEED 

ENFORCED BY 

NOTES 

Restricted 

Manual 

(RM) 

Manual 

FRA requirement 
of Restricted 
Speed. 

Restricted is 20 
MPH or lower, as 
required to stop 
within half of 
range of vision. 

ATC on-board 
subsystem 

A degraded Mode. 

In this mode the On-board ATP subsystem will limit train speed to 20 MPH 
maximum. Train Operator will work in accordance with procedure and 
observe the wayside signals for authority to move. 

Movement authorities, including speed commands are not received in this 
mode. 

In the event of receipt of a speed command or Movement Authority from the 
wayside while in RM mode, the on-board ATC will automatically switch to 
ATC Manual mode. 

RM mode addresses short term ATC failures such as movement through a 
failed switch (under procedure) or through a failed track circuit (which can 
include a broken rail) outside an interlocking. Movement through an 
interlocking with a failed track circuit can be done under Call-On mode (see 
above). 

Yard (or 
Depot) 

N/A 

Yard speed limit 

ATC 

ATC shall enforce yard 
maximum speed limits 
not exceeding 20 mph 
as per 49CFR236 
Subpart 1. 

The Train Operator will select the transition from ATC Manual mode to yard 
and vice versa when a train is stationary on a transition track when entering 
or departing a Yard. 

Yard signals shall be enforced however the safety criteria used in the design 
shall not be as restrictive as for the main line ATC system. 

Trains approaching a shop track from the Yard will require a Train Operator 
acknowledgement before being allowed to enter a shop track. 

Yard mode can treat a shop entrance as an end of track and further 
movement forward can be in RM mode. This will be considered as part of an 
Operations Hazard and Risk analysis. 

If a wayside ATC failure affects Yard mode, RM mode is the most appropriate 
mode for further train movement, protected by procedure. If the on-board 
ATC fails, then the Train Operator must select ATC Bypass for further train 
movement, protected by procedure. 
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MODE OF 
OPERATION 

ATO OR 
MANUAL 
OPERATION 

MAX TRAIN 
SPEED 

ENFORCED BY 

NOTES 

Bypass 

N/A 

FRA limited 
speed is 59 MPH 
per 49CFR236 
subpart 1. 

Rolling Stock propulsion 
and possibly braking 
subsystems. 

This is a mode NOT 
enforced by ATC. In 
this mode, ATC is in 
Bypass mode and is not 
connected to the rolling 
stock equipment. 

Safe operation of trains 
is maintained by home 
signal indications, by 
rules and procedures, 
by regular training and 
refresh. 

The maximum speed 
limit of 59 MPH will be 
enforced by the rolling 
stock propulsion 
subsystem. 

A degraded mode. 

This mode is used if the on-board ATC fails. 

Shall require a separate Bypass switch that will be sealed normally in the 

ATC (not Bypassed) position. 

No secondary enforcement system is required other than a maximum speed 
supervised by the Rolling Stock propulsion subsystem. 
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6.3.6 Automatic Train Operation 

In ATO mode, an on-board ATO subsystem that controls the operation of rolling stock propuision 
and brakes, to start a train at a station, acceierate it, reguiate its speed to beiow the speed iimit, 
move the train between scheduied station stops, and brake the train to a precision stop at the 
next station, aii subject to Movement Authority iimits set by the ATP subsystem. ATO mode is 
extensiveiy used in transit systems woridwide, but has had iimited use on main iine and high 
speed raiiroad iines. ATO is now starting to be depioyed on passenger main iine tracks inciuding 
high speed operations outside the U.S. 

ATO operation shaii be incorporated into the ATC system design for aii phases of station to 
station running on the main iines and for exit and entry to yards inciuding; 

• acceieration from station stops 

• cruising at recommended speeds determined automaticaiiy by the scheduie reguiation 
function of the ATS subsystem, or manuaiiy set by consoie dispatchers through the ATS 
workstations 

• stopping and restarting for ATC enforced stops defined by movement authorities 

• Exit from yard transition tracks within yards to the main iine 

• Entry to yard transition tracks from the main iine 

• station stopping 


ATO requirements shaii therefore be incorporated in the interfaces with roiiing stock and other 
impacted subsystems. The decision to empioy ATO and possibie sub-modes of ATO iies with the 
Operator. 


6.3.7 Bi-Directional Signaling 

Aithough normai passenger train operations oniy require one track in each direction, it is intended 
that bi directionai capabiiity shaii be incorporated into the ATC design. With the use of 
microprocessor interiocking and iogic equipment, the cost of bidirectionai signaiing is marginai, 
resuiting oniy from possibie additionai wayside signais and marker boards (see iater section on 
wayside signais). In the event of a subsystem failure, trains will be routed onto the same track to 
bypass a failure on the other track. Traffic locking shall be used to allow safe following moves 
and prevent routes being cleared into tracks in opposing directions until the section between 
interlockings is clear. Trains operating in either direction on the mainline tracks equipped for 
bidirectional operations shall utilize full ATC functions including PTC and possibly ATO for station 
stopping. 


6.3.8 Interlockings 

Interlocking functions shall be achieved through the deployment of microprocessor technology. 
Conventional relays shall be used at a minimum. Interlocking requirements shall be specified 
including route clearing, approach locking, detector locking, route locking, traffic locking and other 
functions. Approach locking shall be provided as the intermediate interlockings between stations 
will normally be fleeted. Interlocking equipment shall be interfaced with other ATC subsystems to 
send movement authorities to trains that shall ensure safe movement through interlockings. 
Wayside signals shall be located at interlockings and shall indicate the status of routes at their 
entrances however these signals shall not be the primary indication of route status; this shall be 
achieved through the Train Operator’s display in the cab. 
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6.3.9 Track Circuits 

The use of track circuits is driven by the need to compiy with FRA requirements reiated to the 
detection of broken raiis. The ATC system shaii require a track circuit based system; in the event 
of a broken raii, the system shaii assume a train is present and prevent a foiiowing train from 
entering the apparentiy occupied biock. Further movement wiii be under procedure aiiowing the 
Train Operator to observe the track ahead to determine if a broken raii does exist. 


6.3.10 Wayside Signais and Support to Faii Back Operations 

The ATC system design wiii assume that wayside signais shaii be required at the foiiowing 
iocations; 

• At the entrance to interiocking routes (home signais) 

• In Yards 


The prime use for signais on the main iine is to support safe train operation when the primary 
ATC system is not avaiiabie and when movement authorities cannot be received and enforced by 
the on-board ATC subsystem. Home signais shaii be provided on main iines at the entrance to 
interiocking routes oniy and intermediate signais wiii not be provided. At high speeds, signais wiii 
not be visibie in a usefui way to the Train Operator who must foiiow the cab signai indications or 
aiiow the train to operate in ATO. During failures of the primary ATC system, the maximum train 
speed wiii be iimited to 59 mph which is the current iimit incorporated into the 236CFR subpart I; 
Maximum speed when operating with faiied PTC system. In addition, under present ruies a train 
with an ATC faiiure that occurs whiie the train is iocated between interiockings must be operated 
at Restricted Speed untii it passes a wayside signai that indicates that there is no broken raii in 
the signai dock ahead. 

A headway requirement to be supported by intermediate wayside signais shaii not be specified. 

Wayside dwarf type signais are favored as they minimize instaiiation cost and reduce iife cycie 
maintenance cost due to easier access for inspection and repair. The finai decision on signai 
type shaii depend upon the agreed maximum speed when operating in degraded mode. Subpart 
I specifies a speed of 59 mph or iess for passenger trains operating in degraded mode without 
PTC functions. 

It is currentiy assumed that speed enforcement in degraded mode wiii be achieved by means of a 
speed governor function incorporated in the roiiing stock propuision subsystem. This governor 
shaii be activated by the ATC cutout switch in the operating cab. If the train speed exceeds the 
defined maximum (say 59 MPH) then the propuision subsystem wiii cut power to the motors and 
an audibie and visuai aiarm wiii sound in the cab. 


6.3.11 Switch Machines 

Power switch machines shaii be provided on aii switches and on moveabie point frogs on the 
main iine and in yards (see iater in this section). The design team wiii determine a number of 
switch machines for each type of switch (which can be up to 8 machines per switch end for the 
highest speed turnouts) for the purposes of preiiminary engineering and cost estimating. The 
actuai number of machines needed to meet the functionaiity and RAMS performance 
requirements for the project wiii be detaiied to ensure consistency between iine segments to 
ensure a uniform maintenance approach on aii parts of the CHSTP system. 

Yard switch machines shaii be of a different type from mainiine, see the section on Yard Signaiing 
iater in this document. 

Switches at high eievations shaii be equipped with snow meiters powered from the OCS. 
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6.3.12 Impedance Bonds 

Impedance bonds shall be required at traction power faciiities, track circuit boundaries and 
possibiy other iocations inciuding insuiated joint iocations at interiockings, and at intermediate 
iocations where ground connections need to be made to the OCS static wire. Grounding may 
aiso be required at impedance bonds at track circuit boundaries. Engineering must be done to 
determine where these ground connections can be made to ensure correct track circuit operation 
under normai conditions; to ensure that touch potentiai criteria are met. Engineering shaii be 
conducted to ensure that the track circuits wiii correctiy detect a broken raii. The Finai Designer 
wiii coordinate with the traction power engineers in deveioping the track circuit and impedance 
bond iocations. 


6.3.13 Wayside ATC Equipment Housings 

ATC equipment shaii require wayside housings that shaii vary depending on the iocation. The 
iarger, bungaiow styies shaii need to be iocated at interiockings; smaiier wayside cases shaii be 
required adjacent to track circuit boundaries. Other iocations may aiso require wayside housings 
inciuding interface iocations with event sensors inciuding roadway underpasses, seismic 
detectors, wind speed measurement, etc. 

Aiiowances shaii be made in ATC houses to accommodate communications equipment that is 
associated with the train controi system operation. Such equipment inciudes fiber drop and 
network equipment as weii as data radios. 

Site requirements for ATC eiements are covered in Technicai Memorandum 3.3.2; Train Controi 
Site Requirements. 


6.3.14 Wayside ATC Power Supplies 

Power sources for ATC wayside equipment wiii normaiiy be straightforward at stations and 
interiockings where utiiity feeds are assumed. Other iocations such as track circuit boundaries 
where they occur every miie or so in remote, desert, and mountainous regions are iikeiy to be 
probiematicai and/or expensive and aiternatives to utiiity feeds are being considered. 
Aiternatives inciude dedicated signai power feeds from adjacent ATC sites that have utiiity power 
feeds, drops from the OCS, soiar paneis, and wind turbines. In all cases these sources shall be 
supplemented with local batteries. Power supplies for ATC equipment in the field is addressed in 
Technical Memorandum 3.3.3; Train Control Wayside Location Power Supply Options. 


6.3.15 Remote Control and Supervision System 

The remote control and supervision strategy will have an impact on the specification for the 
Automatic Train Supervision (ATS) (Office Subsystem) functional set of the ATC. At present it is 
assumed that the ATS functionality, subsystem performance, and hardware requirements shall be 
specified as part of the ATC system. 

Many of the functions of ATS including automatic dispatching of trains and routing through 
interlockings and terminals shall be accomplished automatically with manual intervention only 
required in the event of system failure or unplanned occurrences. 

It is currently assumed that the ATS prime location will be in the main Operations Control Center 
(OCC) and that there will be remote workstations at other locations (Regional Control Center(s) 
(RCCs)) that will allow dispatching in certain regions, particularly the shared and common 
corridors to be done relatively locally. In the event of major incidents and failures, each RCC 
shall be capable of taking control of the whole CHSTP system. 
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Availability considerations may aiso require that the ATS core equipment inciuding 
communications and database servers may need to be iocated in both the OCC, Regionai 
Centers, and possibiy other sites with options for coid, warm, and hot standby of the back-up 
systems given further consideration. This shaii ensure that in the event of a major incident that 
knocks out the OCC (earthquake, sabotage/terrorist action, major fire, etc.) centraiized 
Supervision and Dispatching can continue with iittie or no interruption to operations. In 
emergencies, the controi of interiockings can be taken from a Regionai Center or a station controi 
room. 

Current pianning has identified that dispatching of the peninsuia corridor wiii require a regionai 
center to handie high speed and Caitrain services between San Jose and San Francisco. This 
Regionai center wouid be staffed 24/7 and couid be considered a iocation that couid assume 
supervision and controi of the fuii high speed network during a major incident. 

A further ievei of degraded operation can be achieved by means of iocai controi paneis 
(connected to the ATC houses) in adjacent station controi rooms. Aithough iocai controi faciiities 
shaii be specified for the ATC in the stations, the reiiabiiity/avaiiability of the communications 
subsystem makes the ioss of controi from the ATS highiy uniikeiy. 

Consideration wiii aiso be given to specifying a form of fieid-faiiback mode for the remote 
interiockings in which they wiii revert to normai routes being caiied and fieeted in the event of a 
ioss of communications with the ATS. A iocai controi panei in the interiocking controi house shaii 
aiso be provided for iocai controi in emergencies and for maintenance testing needs. 

For controi of Yard movements, each yard shaii have a iocai tower with controis and dispiays 
aiiowing Yard supervisors to route trains within the Yard and shops with iocai controi paneis or 
workstations. Handover of trains between the main iines and the yard tracks shaii be 
accompiished with an interface to the ATS system or ATS workstations which can be iocated 
within the Yard towers. See next section on Yard signaiing. 


6.3.16 Yard Signaling 

The Yards shaii require a signai system to operate switches and controi movements of trains in 
the yard itseif and for transitions between the Yard and the mainiine. Currentiy it is assumed that 
there wiii be power switch machines, dwarf type signais, and power-operated deraiis at the 
wayside. Switch machines shaii be of a common yard type and not main iine machines. Yard 
machines are cheaper and can provide a traiiabie feature which iowers the risk of damage to 
equipment and of deraiiment if a train shouid traii a switch set in the wrong position for the move. 

Enforcement of signais and protection of trains and workers in the Yards shaii be accompiished 
by means of a transponder system or equivaient. There shaii need to be a ievei of safe 
interiocking between signais, deraiis, and switches aithough the ievei of safety in a Yard system 
is typicaiiy iess than specified for the mainiine. Trains wiii operate in some form of Yard mode 
(see the Operating Modes tabie above) and yard signais dispiaying stop indications shaii be 
enforced. 

Control of yard signals, derails, and switches in yards shaii be from iocai Yard towers and not 
from the OCC or RCCs. Maximum speed enforcement in the Yards shaii be by the on-board 
ATC subsystem. In order to be exempt from installing PTC in the yard the speed limit within the 
yard cannot exceed 20 mph (49CFR236.1019(b)(1). 

Access and exit from shop tracks into the Yard proper shall be protected by means of power- 
operated derails. 

The transition process between depot and mainline shall entail a transition track in which trains 
will be routed both when entering and exiting each Yard. Transition from Yard to ATC mode of 
operation and vice versa shall occur automatically. Trains departing the Yard to the Main Line 
shall undergo an ATC systems check before being allowed to be routed and a Movement 
Authority or valid speed and destination code sent to the train. The transition tracks must be 
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treated by Operations and maintenance personnei as main iine track as trains shaii be capabie of 
fuii ATC operation, inciuding ATO. ATO shaii be possibie ieaving the transition track for the main 
iine and when entering the transition track from the main iine. ATO shaii not be avaiiabie for 
movements between the transition track and the Yard in either direction. 


6.3.17 Responses to Detection Devices 

It is anticipated that there wiii be a wide variety of detectors piaced on and around the system. 
The devices may inciude, but not be iimited to the detection of the foiiowing events; 

• Earthquake 

• Excessive wind speed 

• High water ieveis 

• Excessive rainfaii 

• Road and Raii underpass bridge strike 

• Landsiide and rock faii 

• Intrusion at trackside and in tunneis 

• Intrusion from overhead bridges and at tunnei portais 

• Intrusion at stations 

Each type of detection wiii be evaiuated for the ievei of risk each hazard can pose to the 
operation and the interface to the ATC system and what kind of response is required of the ATC 
determined. The different types of response can inciude; 

• Switch automaticaiiy from ATO to manuai operation (note if the ATO function is designed 
around a “hands off” approach this wiii typicaiiy invoke a service brake untii the Operator 
takes the controiier). 

• Stop the train immediateiy with a service brake 

• Stop the train immediateiy with a controiied emergency brake 

• Biock an affected section of track and the on-board ATC determines the ievei of brake 
needed to avoid entering the biocked track or to stop the train if it is aiready entering or in 
the affected track section. 


In the case of intrusions at stations the choice wiii be between automatic sensors or 
customer/staff operated aiarms. 

Consideration wiii be given to the types of responses required for different ieveis of intrusion. 

Dragging Equipment Detectors are to be given further consideration for adding to the iist. If not 
necessary on the HSR tracks themselves, strategic DEDs may be required where possible freight 
or other operators’ trains (e.g. Caltrain) may approach but prior to them actually running on HSR 
tracks. High load detectors to protect the overhead contact system from freight trains may also 
be needed. 


6.3.18 ATC Integration 

Close coordination with Rolling Stock, Communications, and Operations is required during the 
development of the ATC criteria and specifications to ensure an integrated system. Certain ATC 
elements shall need to reside in specific portions of the train control system. Some functions 
shall be achieved by having distributed portions of them residing in more than one subsystem, or 
even amongst other systems. Integration work must be done with the rolling stock team to 
ensure that sufficient space and power are provided for and that details relating to certain 
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components, for example particular types of tachometer (axle end for example) are not precluded 
from the design due to detaiis of body and truck design nor roiiing stock maintenance 
requirements 

The iocation of the subsystem or moduie in which certain ATC functions reside is dependent 
upon the architecture proposed by the ATC Suppiier. To the extent possibie, the specifications 
shaii aiiow fiexibiiity to the suppiier to propose the most cost-effective soiution that provides the 
required overaii functionaiity and performance, especiaiiy safety and reiiability, of the system. 


6.3.19 Determination of Position and Speed 

The wayside system shaii use track circuit occupancy to determine train position. The on-board 
system requires a much higher resoiution of speed and position so the train can: 

• Travei through a biock as fast as safeiy possibie 

• Be operated in accordance with civii speed restrictions that may not be iimited to track 
circuit boundaries 

• Stop before it moves past its Movement Authority iimit. 


An accurate and reiiabie determination of position and speed is one of the most criticai functions 
of a modern train controi system. In order to do this ensuring faii-safe characteristics as weii as 
high avaiiabiiity, it is typicaiiy done with a combination of devices and techniques, inciuding 
tachometers, inertiai sensors, GPS, and transponders or baiises (mounted between the raiis on 
the track). 

Wayside equipment in the form of track circuits indicates the position of a particuiar train on the 
track which is used to fuifiii the interiocking functions and to protect a specific train from foiiowing 
trains. 

Target points shaii be estabiished as part of a Movement Authority for a specific train which 
defines the maximum iimit of a train’s movement aiong the track and defines the maximum 
speeds that the train is aiiowed to attain between its current position and its target point. 

• Each train shaii receive its Movement Authority from the wayside based upon factors 
inciuding the status of routes through interiockings, the position of switches, occupancy of 
track circuits, and other eiements of the wayside signai system and reiate them to the on¬ 
board database. 

• On-board databases shaii aiiow for updates from the centrai controi system for the 
temporary modification of database eiements inciuding speed restrictions. 

• The on-board ATC subsystem shaii determine its position in reiation to the database and 
compare its actuai speed with the aiiowed speed at their current position on the track. 

• The Train Operator’s dispiay shaii provide sufficient information to aiiow the operator to 
moduiate the throttie and brake to aiiow the train to travei as ciose to the speed iimits 
without unnecessary automatic interventions for impending or actuai overspeed. 


Speed and position sensors shaii be based on proven products and aiso be combined in such a 
way that the information derived by the train is truiy vitai. This may require a diverse means of 
obtaining data from which speed and position can be determined. 

Aithough roiiing stock suppiied tachometers may be used by the ATC system for non-vitai 
functions, the primary vitai function of train position and speed determination shaii use sensors 
provided and instaiied by the ATC system suppiier. 
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6.3.20 Hardware Requirements for Various Subsystems 

The following specific hardware requirements have been identified; 

• Tachometers; Mounted on the axie ends or on gearboxes. Simiiar devices are required 
by the train propuision and brake systems for siip and siide controi. These devices 
transiate puises as the axies rotate into distance traveied, and are subject to errors from 
wheei wear, wheei siip, and wheei siide. Such errors occur despite the wheei siip and 
siide protection provided in the propuision and braking systems on the roiiing stock. 
Aithough the train controi system can use data derived from muiti channei devices 
provided for the propuision and braking subsystems on the train, the typicai approach, 
and one that better assures avaiiabiiity and safety-criticaiity, is for the signai system 
suppiier to provide their own dedicated tachometers in a iocation provided by the roiiing 
stock suppiier in a detaiied interface definition. 

• Transponders; Aiso caiied baiises, are mounted between the raiis and provide a set of 
fixed or variabie data to the train when an underside antenna on the train passes over 
them. This data is used to correct any accumuiating positioning error in the on-board 
subsystem, generaiiy due to siip and siide between the wheeis and the raiis. The train 
controi system continuousiy assesses the worst case for error accumuiation and takes 
account of it in the safety components of the system. The Eurobaiise is designed 
specificaiiy to work reiiabiy at 20 O- 1 - mph to ensure a minimum quantity of data can be 
received by the train. 

• Other devices; GPS is being used by the North American PTC system in conjunction with 
tachometers. The use of GPS as a prime component of position determination in a vitai 
signai system wiii not be considered. In addition to vitai system considerations, there are 
potentiai probiems for avaiiabiiity, particuiariy when a train is operating through tunneis or 
in city areas with taii buiidings that can biock sateiiite reception. Other devices inciude 
inertiai navigation systems which aithough proven in aerospace appiications, have iittie 
experience on raiiroads. Such devices can be used for dead reckoning and incrementaiiy 
summing acceierations in the three axes to determine distance and direction moved. 
They are subject to errors by train suspension effects and acceierations caused by 
discontinuities in the track. 

Both speed and position can be determined from some of the same devices as described above. 
Tachometers, inertiai devices, and GPS can determine speed very accurateiy when used in 
combination. 

Position determination using GPS wouid iikeiy be in combination with tachometers and other on¬ 
board devices. Some deveiopment wiii be required however for a suppiier to demonstrate in the 
system safety anaiysis that the specified criteria for reiiability, avaiiabiiity, and safety can be met 
by the incorporation of GPS and other integrated devices. GPS receivers wiii iikeiy be used to 
determine time for the system to ensure that safety-criticai data received from the wayside and 
centrai office is current. 

Unproven technoiogy in the high speed environment wiii not be considered. 


6.3.21 Types of Data Transmission from Transponders 

Transponders (or baiises) can be of two basic types; the first contains fixed data which is 
transmitted to trains as they pass over the iocation with no connection to any other ATC eiement. 
The second contains variabie or fixed and variabie data whereby a connection to another ATC 
system eiement can aiter the data transmitted (for exampie different speed iimits can be 
transmitted if the switch ahead is in the normai or reverse position). 

• The fixed data can simpiy be a unique iocation identification which the train compares to 
its database and corrects any error based on a caicuiation of its position determined from 
on-board equipment (e.g. tachometers). 
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• Fixed data including speed iimits can aiso be transmitted to the train. It is envisaged that 
such data wiii be contained within the on-board database and transponders shaii not be 
required to upioad this information. 

• Variabie data can inciude the status of the raiiway in front of the train. 

• Transponders aiso provide an absoiute confirmation of the train’s position which can be 
used as a diverse confirmation of position and therefore support the safety case for the 
system and as a means of positive confirmation of position if the train is operated under 
procedure through a switch with unknown status during faiiures. This is preferred to a 
manuai input confirmation as it enhances safety during faiiure conditions. 


Transponder-oniy transmission to trains provides oniy for an intermittent ATC system and this 
type of system has performance and functionai constraints when compared to a continuous 
communications type ATC system. It is therefore envisaged that the ATC system shaii receive 
Movement Authority data either through a radio iink (such as with ERTMS) with the wayside 
equipment houses and cases or through a digitaiiy encoded track circuit transmission through the 
running raiis (TVM430 etc). 

Transponders shaii therefore be required for both radio and coded track circuit types of system to 
provide the position error correction function for an on-board speed and distance traveied 
determination subsystem. 


6.3.22 Location of On-Board ATC Equipment 

A number of items of train controi system apparatus shaii be mounted on the roiiing stock. These 
inciude the dispiays for the Train Operator, the train controi iogic controiier, the train controi 
communications equipment, the iocation determination subsystem (tachometer, GPS, inertiai 
navigation, transponder reader antennas, etc.), data radios, and antennas for GPS and data 
radios. 

Much of this equipment is unique to specific ATC suppiiers and wouid normaiiy be suppiied by 
them as opposed to the roiiing stock suppiier. 

The CHSTP Systems team wiii coordinate between the ATC, communications, roiiing stock, and 
operations personnei to discuss the different types of equipment required and identify sufficient 
provisions that must be accounted for in the roiiing stock design to aiiow for the foiiowing; 

• physicai space requirements 

• mounting provisions 

• cabies and cabieways to connect the equipment 

• termination paneis 

• power and ventiiation needs 

• other considerations inciuding non-metaiiic paneis around radio and GPS antennas 


The requirements must support muitipie, appiicabie vendor equipment together with defined 
functionaiity aiiocation (between train controi and train subsystems). 


6.3.23 ATC Safety Requirements 

The ATC system and subsystem safety criteria shaii set threshoids for ATC system safety that 
shaii be compatibie with the overaii CHSTP system safety criteria. 

Further consideration wiii be given to acceptabie methods for achieving error free code. Severai 
train controi projects have suffered deiays on recent years even with estabiished systems that 
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were proposed not being able to meet specified standards. Appropriate formai methods wiii be 
reviewed and specified if appropriate. 

In the achievement of error free code, the approach of specifying proven systems with a minimum 
of new or changed functions wiii minimize the risk to scheduie and budget posed by software 
deveiopment risks. 

The ATC safety requirements shaii aiso inciude the incorporation into the system design of a set 
of safe braking criteria that wiii be described as part of a modei. This safe braking modei shaii 
define the necessary criteria that the ATC and Roiiing Stock systems must meet in order to 
satisfy the safe separation of trains, enforcement of home signais, and enforcement of speed 
iimits. 

The system design shaii inciude the abiiity of the ATC subsystem to command both a controiied 
emergency brake in which wheei siide protection is active, and an absoiute emergency brake in 
which wheei siide protection is cut out. 


6.3.24 Reliability, Availability, and Maintainability (RAM) of the ATC System 

The ATC system and subsystem safety criteria shaii set threshoids for ATC system RAM that 
shaii be compatibie with the overaii CHSTP system RAM criteria. 

Extremeiy high avaiiabiiity shaii be specified to avoid deiays that might occur from system and 
subsystem faiiures. Different degrees of redundancy may be appropriate for different portions of 
the system in order to achieve the avaiiabiiity targets but at the same time minimize the faiiure 
rate and the mean time to repair. 


6.3.25 Data Radio Requirements 

A high speed, high avaiiabiiity performance shaii be specified, with comprehensive and iikeiy 
overiapping, coverage throughout aii main iine and yard tracks. 

Radio aiternatives wiii be investigated by the Systems team for appiicabiiity (performance, 
coverage, avaiiabiiity, etc.) of the frequencies and bandwidth. Existing and emerging pubiic 
standard systems wiii be considered. 


6.3.26 Interfaces 

The ATC system shaii interface to the foiiowing subsystems; 

6.3.26.1 Rolling Stock 

If the Rolling Stock is to be procured separately to the core systems for CHSTP, a significant 
amount of detail shall be agreed such that the Rolling Stock side of the interface can be included 
in the scope of the procurement. 

6.3.26.2 Communications 

Interfaces between the ATC subsystem and the Communications subsystem are also extensive. 
In the event that an ERTMS train control system is selected, data and voice radio 
communications shall be integral with the overall ATC subsystem. 

6.3.26.3 Traction Power 

The bonding and grounding scheme for ATC shall be compatible with the needs of the traction 
power subsystem. 
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6.3.26.4 OCS 

It is anticipated that the ATC subsystem may be required to impiement two functions; 

• On-board switching commands to the roiiing stock subsystem to aiiow isoiation between 
section gaps as the train traverses the gap; this is iikeiy a database function oniy where 
the section gaps are identified in the on-board database 

• Prevention of trains entering sections of the iine where the OCS has been de-energized; 
this shaii require an interface between the OCS energized indication and the ATC. This 
couid be done at the OCC ievei with an interface between ATS and SCADA or at a iocai 
ievei. Modified movement authorities wouid be transmitted to the on-board ATC and a 
stop enforced. 

6.3.26.5 Track 

The detaiis of the track iayout inciuding switch configurations, gradient, curvature, etc. must be 
inciuded in the ATC database. There shaii aiso be physicai interfaces between the switch 
machines and the switches themseives and between the track and ATC transponders where the 
iatter must be secureiy fixed to the track and maintained within strict toierances. 

In the Yards, derails and transponders (if used for yard signal enforcement) shall also be fixed to 
the track. 

6.3.26.6 Infrastructure 

The ATC subsystem shall interface with infrastructure as a result of the need to install equipment 
houses, cases and other elements such as signals along the right of way and comply with 
clearance requirements and access to the various ATC facilities. Basic footprint, equipment size, 
and access needs have been provided to the infrastructure group. 

Special considerations shall be given to tunnel portals for the need to house ATC equipment in 
buildings and other structures at these locations. 

6.3.26.7 System Time 

The ATC subsystem shall derive its standard time through an interface with GPS. 
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